Can you uninstall Symantec Event Agent and leave the collector's behind
Last Updated November 05, 2012
You want to upgrade the Symantec Event Agent off box and do not want to have to reinstall all the collectors that have been installed.
If you up are upgrading from a Symantec Event Agent v4.5 or higher you do not need to uninstall or reinstall all of the collectors. When you uninstall the Event Agent using Add / Remove Programs or from a command line the collectors and file structure will be left behind in the following paths:
You can then install and updated Symantec Event Agent and the collectors will start from the last saved position when the Agent restarts.
Disable the Collector Sensors in the SSIM manager prior to the agent upgrade.
On the off box agent machines, save the collector directories outside of the Agent directory structure.
Perform the upgrade, then copy the collector directories back (if they were in fact removed). The last position files will be intact and the collector will resume reading events from there once the sensor are reenabled.
Re-enable the Sensor
Imported Document ID: TECH167176
Subscribing will provide email updates when this Article is updated. Login is required to Subscribe