Elastic Uninstallation Guide
Elastic should not be removed.
There may be a need to uninstall Elastic (perhaps to reinstall the software, for example). This process may be made a little more complicated by Elastic's Agent Tamper Protection.
From a security perspective, this is a necessity to ensure agent resiliency from unauthorized changes, possibly including malicious attempts.
Uninstall Token
The Agent Tamper Protection requires an additional code to be provided so that one can uninstall Elastic. This additional piece of information is an uninstall token. There is one uninstall token per policy. Elastic's Documentation on the topic can be found here: https://www.elastic.co/guide/en/security/8.16/uninstall-agent.html
Windows
C:\"Program Files"\Elastic\Agent\elastic-agent.exe uninstall --uninstall-token <UNINSTALL_TOKEN_HERE>
Linux and Mac
sudo elastic-agent uninstall --uninstall-token <UNINSTALL_TOKEN_HERE>
Requesting the Uninstall Token
Information technology professionals on campus may contact endpoint-security@tamu.edu to request access to the uninstall token or ask any questions.