C.2 Uninstalling Sentinel

An uninstall script is available to help you remove a Sentinel installation. Before performing a new installation, you should perform all of the following steps to ensure there are no files or system settings remaining from a previous installation.

WARNING:These instructions involve modifying operating system settings and files. If you are not familiar with modifying these system settings and files, please contact your system administrator.

C.2.1 Uninstalling the Sentinel Server

Use the following steps to uninstall the Sentinel server:

  1. Log in to the Sentinel server as root.

    NOTE:You cannot uninstall Sentinel server as a non-root user, if the installation is performed as a root user. However, a non-root user can uninstall the Sentinel server if the installation was performed by non-root user.

  2. Access the following directory:

    /opt/novell/sentinel/setup/

  3. Run the following command:

    ./uninstall–sentinel

  4. When prompted to reconfirm that you want to proceed with the uninstall, press y.

    The script first stops the service and then removes it completely.

C.2.2 Uninstalling the Collector Manager or Correlation Engine

Use the following steps to uninstall the Collector Manager and Correlation Engine:

  1. Log in as root.

    NOTE:You can not uninstall Remote Collector Manager or Remote correlation engine as non-root user, if installation is performed as a root user. However, non-root user can uninstall, if the installation is done by a non-root user.

  2. Go to the following location:

    /opt/novell/sentinel/setup

  3. Run the following command:

    ./uninstall–sentinel

    The script displays a warning that Collector Manager or Correlation Engine and all associated data will be completely removed.

  4. Enter y to remove the Collector Manager or Correlation Engine.

    The script first stops the service and then removes it completely. However, the Collector Manager and Correlation Engine icon is still displayed in inactive state in the Web interface.

  5. Perform the following additional steps to manually delete the Collector Manager and Correlation Engine in the Web interface:

    Collector Manager:

    1. Access Event Source Management > Live View.

    2. Right-click the Collector Manager you want to delete, then click Delete.

    Correlation Engine:

    1. Log in to the Sentinel Web interface as an administrator.

    2. Expand Correlation, then select the Correlation Engine that you want to delete.

    3. Click the Delete button (garbage can icon).