Removing corelight-update¶

Learn how to remove Corelight-update from a host using the procedures in this topic.

Removing Corelight-update packages¶

The Corelight-update installation is performed using the operating system’s package management tools. You can use the same tools to remove the Corelight-update package and files. Typically, package managers will not remove a directory that includes files modified after the package installation, and will warn you if modified files are found.

Removing a .deb package

Use apt purge to remove the package.
```
sudo apt purge corelight-update
```

Removing an .rpm package

Use dnf remove to remove the package.
```
sudo dnf remove corelight-update
```

Remove remaining Corelight-update folders from the host¶

The /etc/corelight-update/, and /var/corelight-update/ folders can contain modified configuration files. After the package management tool has completed removing the Corelight-update package, you can remove any remaining folders manually.

For example:

rm -r /etc/corelight-update/
rm -r /var/log/corelight-update.d/
rm -r /var/corelight-update/

Reinstallation of Corelight-update

Once the removal of the folders is complete, if you want to reinstall Corelight-update use the instructions in QuickStart - new install.