Logcore

Appearance

Uninstall the agent ​

Uninstalling stops data collection from the server. Data the server has already sent stays in Logcore until it expires through retention.

Linux ​

Run these commands as a user with sudo:

sh
# 1. Stop the service and disable it at boot
sudo systemctl disable --now logcore-agent

# 2. Remove the systemd unit
sudo rm -f /etc/systemd/system/logcore-agent.service
sudo systemctl daemon-reload

# 3. Remove the binary
sudo rm -f /usr/bin/logcore-agent

# 4. Remove configuration and data (API key, service files, read positions)
sudo rm -rf /etc/logcore-agent /var/lib/logcore-agent

# 5. Remove the system user
sudo userdel logcore-agent

Check that it's gone:

sh
systemctl status logcore-agent   # "Unit logcore-agent.service could not be found."
which logcore-agent              # no output
Installed manually with logcore-agent service install?
sh
sudo logcore-agent service stop
sudo logcore-agent service uninstall
sudo rm -f /usr/bin/logcore-agent /usr/local/bin/logcore-agent
sudo rm -rf /etc/logcore-agent /var/lib/logcore-agent
Remove the ACLs you added for log folders (optional)

If you granted access with setfacl, you can remove it:

sh
sudo setfacl -R -x u:logcore-agent /opt/myapp/logs
sudo setfacl -R -d -x u:logcore-agent /opt/myapp/logs

Run this before userdel, or use the numeric user ID afterwards.

Keep the configuration for later

Skip step 4 if you might reinstall. The installer then reuses your existing logcore.yaml and service files.

Windows ​

Run in PowerShell as Administrator:

powershell
# 1. Stop and remove the service
logcore-agent service stop
logcore-agent service uninstall

# 2. Remove the program, configuration and data
Remove-Item -Recurse -Force "C:\Program Files\Logcore", "C:\ProgramData\Logcore"

Optionally, remove C:\Program Files\Logcore from the system PATH under System Properties → Environment Variables.

Check that it's gone:

powershell
Get-Service "Logcore Agent"   # should report that no service was found

Remove the host from the dashboard ​

After you uninstall the agent, the host appears as Offline in Infrastructure. To remove it:

  1. Open Infrastructure and click the host.
  2. Choose Remove.

If the agent is still running on that server, the host comes back the next time it reports.

Revoke the API key (optional) ​

If the key was used only on this server, or you think it was exposed, revoke it under Settings → Agent API keys. Other agents that use the same key stop sending data as soon as it's revoked.