Skip to content

Decomission-S1Agent

SYNOPSIS

Decommission SentinelOne agents that match the specified filter.

SYNTAX

Decomission-S1Agent [-Filter] <String> [-FilterValue] <String[]> [<CommonParameters>]

DESCRIPTION

This function decommissions SentinelOne agents based on the provided filter and filter values. It sends a request to the SentinelOne API to decommission the agents and returns the response. If no agents are found or the agents are in dynamic groups, an error message is displayed.

EXAMPLES

EXAMPLE 1

Decomission-S1Agent -Filter "ids" -FilterValue @("uuid1", "uuid2")

Decommissions the agents with the specified UUIDs.

EXAMPLE 2

@("uuid1", "uuid2") | Decomission-S1Agent -Filter "ids"

Decommissions the agents with the specified UUIDs provided through the pipeline.

PARAMETERS

-Filter

The filter type to use for selecting agents. Currently supports "ids".

Type: String
Parameter Sets: (All)
Aliases:

Required: True
Position: 1
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-FilterValue

The values for the specified filter. Should be an array of UUIDs.

Type: String[]
Parameter Sets: (All)
Aliases:

Required: True
Position: 2
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

CommonParameters

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.

INPUTS

OUTPUTS

NOTES