Restart agent - Learn how to restart the agent on the endpoint. - Administrator Guide - Cortex XSIAM - Cortex - Security Operations

Cortex XSIAM 3.x Documentation

Product
Cortex XSIAM
Creation date
2025-07-15
Last date published
2026-06-11
Category
Administrator Guide
Abstract

Learn how to restart the agent on the endpoint.

You can restart an agent from the Cortex XSIAM tenant. This action is hidden by default.

As soon as the action is confirmed, the restart command triggers a restart of the agent on the endpoint.

  1. From Cortex XSIAM, navigate to InventoryEndpointsAll Endpoints. Select the relevant endpoint to restart and right-click + Alt, select Endpoint ControlRestart Agent, and click OK.

  2. Select I agree, and then click OK to confirm restarting the agent on all selected endpoints.