Cisco
Login
Search
Software Secure Firewall Threat Defense
Platform Secure Firewall Threat Defense Virtual
Activity Onboard

Cisco Security Analytics and Logging Remove the Secure Event Connector Remove a Secure Event Connector from the Secure Device Connector VM

Last updated: Jun 09, 2025

Remove a Secure Event Connector from the Secure Device Connector VM

This is the second part of a two part procedure to remove the Secure Event Connector from your SDC. See Remove the Secure Event Connector before you begin.

Procedure

1

Open your virtual machine hypervisor and start a console session for your SDC.

2

Switch to the SDC user using the command [cdo@sdc]$ sudo su sdc.
3

To remove an SEC from the SDC virtual machine, you can use one of the following commands:

  • If you want to use the tenant selector (or if there’s only one tenant on the VM):

    [sdc@tenant toolkit]$ sdc eventing delete

  • If you want to specify the tenant directly in the command arguments:

    [sdc@tenant toolkit]$ sdc eventing delete CDO_{tenant-name}
4

Confirm your intention to remove the SEC files.
Previous topic Remove an SEC from Security Cloud Control Next topic Finding Your Device's TCP, UDP, and NSEL Port Used for Secure Logging Analytics (SaaS)