Each installation of the Field Effect endpoint agent is given its own unique installation identifier with the name of the host being a property of that installation instance.
Duplicate endpoints are created each time the Field Effect endpoint agent is installed on the same host without its previous instance being uninstalled first.
On a physical device you can try and remove duplicates by identifying and uninstalling the older installations. The uninstallation will send the instruction to the portal that the installation has been removed and clear it.
For installations on virtualized devices we suggest you uninstall the agent before recreating the virtual device. If this is not possible, unused duplicated installation will automatically clear from the portal after 60 days of inactivity.
It is possible via a request to support@fieldeffect.com to both reduce the window of inactivity, and request the manual removal of duplicate endpoints, however:
The reduction in the inactivity window will reduce the amount of logs recorded for your Endpoints and thus reduces the data available for any breach investigation. If you choose to reduce the window to 1 week and a device is inactive for 14 days (holidays?) then the 'inactive' endpoint will be removed from the portal along with its data. Consider making use of Log Retention to retain logs beyond the inactivity window.
Also note that the manual removal of an Endpoint by the support@fieldeffect.com team will not only remove the duplicate Endpoint, but also its data/logs.
Was this article helpful?
That’s Great!
Thank you for your feedback
Sorry! We couldn't be helpful
Thank you for your feedback
Feedback sent
We appreciate your effort and will try to fix the article