How to do housekeeping in FortiEDR?

Hello , 

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible. 

Hello,

We are still looking for an answer to your question.

We will come back to you ASAP.

Hello again MikeLiu87386,

I found this solution. Can you tell us if it helps, please?

To perform housekeeping in FortiEDR by removing 'Disconnected (Expired)' collectors, you can use the REST-API to automate the process. Here’s how you can do it:

1. Access the REST-API Reference: Navigate to the FortiEDR manager URL: https://<manager_URL>/rest-ui.

2. Use the 'Delete Collectors' API Call: Utilize the API endpoint: /management-rest/inventory/delete-collectors.
   
   

3. Set the 'lastSeenEnd' Parameter: Define the date of the last collector's connection to delete. For example, if you want to remove collectors that have not connected since a specific date, set the 'lastSeenEnd' parameter accordingly.
   
   

4. Example Configuration: If the last connection date of a collector is 26.06.2025, set the 'lastSeenEnd' value to '2025-06-27 00:00:00'.
   
   

5. Execute the API Call: Send a DELETE request with the configured parameters to remove the expired collectors.
   
   

6. Verify Deletion: Check the audit trail in FortiEDR to confirm the list of deleted collectors.

This method allows you to efficiently manage and remove multiple 'Disconnected (Expired)' collectors in a single step.