B.2 Uninstalling Sentinel

An uninstall script is available to help you remove a Sentinel installation. Before performing a new installation, you should perform all of the following steps to ensure there are no files or system settings remaining from a previous installation.

WARNING:These instructions involve modifying operating system settings and files. If you are not familiar with modifying these system settings and files, please contact your system administrator.

B.2.1 Uninstalling the Sentinel Server

Use the following steps to uninstall the Sentinel server:

  1. Log in to the Sentinel server as root.

    NOTE:You cannot uninstall Sentinel server as a non-root user, if the installation is performed as a root user. However, a non-root user can uninstall the Sentinel server if the installation was performed by non-root user.

  2. Access the following directory:

    <sentinel_installation_path>/opt/novell/sentinel/setup/

  3. Run the following command:

    ./uninstall–sentinel

  4. When prompted to reconfirm that you want to proceed with the uninstall, press y.

    The script first stops the service and then removes it completely.

B.2.2 Uninstalling the Collector Manager and Correlation Engine

Use the following steps to uninstall the Collector Manager and Correlation Engine:

  1. Log in as root to the Collector Manager and Correlation Engine computer.

    NOTE:You can not uninstall the remote Collector Manager or remote Correlation Engine as a non-root user, if the installation was performed as a root user. However, a non-root user can uninstall, if the installation was done as a non-root user.

  2. Go to the following location:

    /opt/novell/sentinel/setup

  3. Run the following command:

    ./uninstall–sentinel

    The script displays a warning that the Collector Manager or Correlation Engine, and all associated data will be completely removed.

  4. Enter y to remove the Collector Manager or Correlation Engine.

    The script first stops the service and then removes it completely. However, the Collector Manager and Correlation Engine icon is still displayed in inactive state in the Sentinel Main interface.

  5. Perform the following additional steps to manually delete the Collector Manager and Correlation Engine in the Sentinel Main interface:

    Collector Manager:

    1. Access Event Source Management > Live View.

    2. Right-click the Collector Manager you want to delete, then click Delete.

    Correlation Engine:

    1. Navigate to the Sentinel Main interface as an administrator.

    2. Expand Correlation, then select the Correlation Engine that you want to delete.

    3. Click the Delete button (garbage can icon).