---
title: Uninstall Elastic Agent
description: To uninstall Elastic Agent from a host, run the uninstall command from the directory where it’s running. Refer to the Fleet and Elastic Agent documentation...
url: https://www.elastic.co/elastic/docs-builder/docs/3028/solutions/security/configure-elastic-defend/uninstall-elastic-agent
products:
  - Elastic Cloud Serverless
  - Elastic Security
applies_to:
  - Serverless Security projects: Generally available
  - Elastic Stack: Generally available
---

# Uninstall Elastic Agent
To uninstall Elastic Agent from a host, run the `uninstall` command from the directory where it’s running. Refer to the [Fleet and Elastic Agent documentation](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/fleet/uninstall-elastic-agent) for more information.
If [Agent tamper protection](https://www.elastic.co/elastic/docs-builder/docs/3028/solutions/security/configure-elastic-defend/prevent-elastic-agent-uninstallation) is enabled on the Agent policy for the host, you’ll need to include the uninstall token in the command, using the `--uninstall-token` flag. You can [find the uninstall token](/elastic/docs-builder/docs/3028/solutions/security/configure-elastic-defend/prevent-elastic-agent-uninstallation#fleet-uninstall-tokens) on the Agent policy. Alternatively, find **Fleet** in the navigation menu or by using the [global search field](https://www.elastic.co/elastic/docs-builder/docs/3028/explore-analyze/find-and-organize/find-apps-and-objects), and select **Uninstall tokens**.
For example, to uninstall Elastic Agent on a macOS or Linux host:
```shell
sudo elastic-agent uninstall --uninstall-token 12345678901234567890123456789012
```


## Provide multiple uninstall tokens

If you have multiple tamper-protected Elastic Agent policies, you may want to provide multiple uninstall tokens in a single command. There are two ways to do this:
- The `--uninstall-token` command can receive multiple uninstall tokens separated by a comma, without spaces.
  ```shell
  sudo elastic-agent uninstall -f --uninstall-token 7b3d364db8e0deb1cda696ae85e42644,a7336b71e243e7c92d9504b04a774266
  ```
- `--uninstall-token`'s argument can also be a path to a text file with one uninstall token per line.
  <note>
  You must use the full file path, otherwise the file may not be found.
  </note>
  ```shell
  sudo elastic-agent uninstall -f --uninstall-token /tmp/tokens.txt
  ```
  In this example, `tokens.txt` would contain:
  ```txt
  7b3d364db8e0deb1cda696ae85e42644
  a7336b71e243e7c92d9504b04a774266
  ```


## Uninstall Elastic Endpoint

Use these commands to uninstall Elastic Endpoint from a host **ONLY** if [uninstalling an Elastic Agent](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/fleet/uninstall-elastic-agent) is unsuccessful.
Windows
```shell
cd %TEMP%
copy "c:\Program Files\Elastic\Endpoint\elastic-endpoint.exe" elastic-endpoint.exe
.\elastic-endpoint.exe uninstall
del .\elastic-endpoint.exe
```

macOS
```shell
cd /tmp
cp /Library/Elastic/Endpoint/elastic-endpoint elastic-endpoint
sudo ./elastic-endpoint uninstall
rm elastic-endpoint
```

Linux
```shell
cd /tmp
cp /opt/Elastic/Endpoint/elastic-endpoint elastic-endpoint
sudo ./elastic-endpoint uninstall
rm elastic-endpoint
```