Uninstalling Lacework Agent from a Host Machine
Lacework agents are installed as deb or rpm packages named Lacework. To uninstall a Lacework agent, package specific Linux tools like dpkg (Ubuntu-based) or yum (Redhat-based) can be used to uninstall the agent using the following commands:
$dpkg --remove lacework $yum remove lacework
Lacework supports the ‘purge’ or ‘erase’ option to remove all files, including configuration and logs if necessary.
Uninstalling Lacework Agent on CoreOS
To uninstall on CoreOS, remove all Docker images related to Lacework agents, then manually remove directories and saved configuration files with sudo privileges using the following commands:
rm /etc/systemd/system/datacollector.service rm –rf /var/log/lacework/ rm –rf /var/lib/lacework/