Skip to main content



Cisco Defense Orchestrator

Remove the Secure Event Connector

Warning: This procedure deletes the Secure Event Connector from the SDC. Doing so will prevent you from using Cisco Security Analytics and Logging (SaaS). It is not reversible. If you have any questions or concerns, contact CDO support before taking this action.

To remove the Secure Event Connector from your Secure Device Connector, do these two tasks:

  1. Remove SEC from CDO.
  2. Remove SEC files from the SDC. 

Remove SEC from CDO

  1. Log in to CDO.
  2. From the account menu, select Secure Connectors.
  3. Select the row with the device type, Secure Event Connector.

Warning: Be careful. Do NOT select your Secure Device Connector.

  1. In the Actions pane, click Remove.
  2. Click OK to confirm your intent to delete the Secure Event Connector.

Remove SEC files from the SDC

  1. Open your virtual machine hypervisor and start a console session for your SDC. 
  2. Switch to the SDC user.
[cdo@tenant toolkit]$sudo su sdc
  1. At the prompt type one of these commands:
  • If you are managing only your own tenant:
[sdc@tenant toolkit]$ /usr/local/cdo/toolkit/ remove
  • If you manage more than one tenant, add CDO_ to the beginning of the tenant name. For example:
[sdc@tenant toolkit]$ /usr/local/cdo/toolkit/ remove CDO_[tenant_name]
  1. Confirm your intention to remove the SEC files.