Remove the Log Correlation Engine Web Query Client

Note: All shell commands need to be executed by a user with root privileges.

To remove the Log Correlation Engine Web Query Client:

1. To query the rpm database to obtain the name of the currently installed package, type rpm -qa |grep lce_.

   Example:

   # rpm -qa |grep lce_

   lce_webquery-4.6.0-el6.x86_64

2. Type rpm -e lce_webquery.

   The Web Query Client package is removed.

   Example:

   # rpm -e lce_webquery

   warning: /opt/lce_webquery/state.json saved as /opt/lce_webquery/state.json.rpmsave

   warning: /opt/lce_webquery/server_assignment.xml saved as /opt/lce_webquery/server_assignment.xml.rpmsave

3. Optionally, type rm -rf /opt/lce_webquery/ to remove the Web Query Client install directory. Configuration and log files will remain unless the directory is removed.

   An additional directory, /opt/tenable, will be installed with the Web Query Client if it does not already exist. This directory contains a UUID that tracks all events related to the endpoint on which the client is installed. This directory should only be removed if no other Tenable products are in use, and no others will be installed on the endpoint in the future.