Manage and remove the agent

#Check the status

& "$env:ProgramFiles\InfraMole\inframole-agent.exe" status
Get-Service inframole-agent

sudo inframole-agent status
systemctl status inframole-agent

status shows the server, the agent id and whether the service is running. In InfraMole, Settings › Agents lists every agent with its last report.

#Logs

Get-WinEvent -FilterHashtable @{ LogName = "Application"; ProviderName = "inframole-agent" } -MaxEvents 20

journalctl -u inframole-agent -n 50 --no-pager

#Run once in the foreground

Useful to see errors directly (stop the service first):

Stop-Service inframole-agent
& "$env:ProgramFiles\InfraMole\inframole-agent.exe" run --once --config C:\ProgramData\InfraMole\agent.json
Start-Service inframole-agent

sudo systemctl stop inframole-agent
sudo inframole-agent run --once
sudo systemctl start inframole-agent

#Revoke an agent

In Settings › Agents, revoke the agent. Its reports are rejected immediately; the host stays in the Library (it becomes Stale after three missed intervals) with all its history. Revoking is also the right step when a machine is lost or compromised.

An enrollment token can be revoked there too; agents already enrolled keep working.

#Re-enroll

Running the install command again on the same machine re-enrolls it: the same agent is reused (the machine is recognised by its machine id) and gets a new credential. No duplicate host is created.

#Uninstall

& "$env:ProgramFiles\InfraMole\inframole-agent.exe" uninstall
Remove-Item -Recurse "$env:ProgramFiles\InfraMole"

sudo inframole-agent uninstall
sudo rm /usr/local/bin/inframole-agent

uninstall stops and removes the service and deletes its configuration (--keep-config keeps it). It does not revoke the agent on the server — revoke it in Settings › Agents so its credential can never be used again.