# Active Alerts Showing for Unenrolled Agents

**URL:** https://discuss.elastic.co/t/active-alerts-showing-for-unenrolled-agents/347060
**Category:** Elastic Observability
**Tags:** elastic-stack-alerting
**Created:** [November 13, 2023, 7:45pm UTC](https://discuss.elastic.co/t/active-alerts-showing-for-unenrolled-agents/347060 "2023-11-13T19:45:46Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![DougR](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dougr/32/48095_2.png) [@DougR](https://discuss.elastic.co/u/DougR)
#### Post date: [November 13, 2023, 7:45pm UTC](https://discuss.elastic.co/t/active-alerts-showing-for-unenrolled-agents/347060/1 "2023-11-13T19:45:46Z")

</div>

We are using Elastic Cloud 8.11.0. I have active alerts showing for agents which have been unenrolled from Fleet and are showing in Fleet as unenrolled. How can I remove these alerts?

---

<div class="post-metadata">

### Author: ![benakansara](https://avatars.discourse-cdn.com/v4/letter/b/c2a13f/32.png) [@benakansara](https://discuss.elastic.co/u/benakansara)
#### Post date: [November 14, 2023, 7:00am UTC](https://discuss.elastic.co/t/active-alerts-showing-for-unenrolled-agents/347060/2 "2023-11-14T07:00:26Z")

</div>

Hi @DougR ,

Could you tell us which rule are you using that has active alerts?

---

<div class="post-metadata">

### Author: ![DougR](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dougr/32/48095_2.png) [@DougR](https://discuss.elastic.co/u/DougR)
#### Post date: [November 14, 2023, 1:54pm UTC](https://discuss.elastic.co/t/active-alerts-showing-for-unenrolled-agents/347060/3 "2023-11-14T13:54:44Z")

</div>

It's a metric threshold alert where the user who configured the alert checked the "alert when no data reported" option. The hosts are decommissioned and have been unenrolled, and one alert has now been open for \> 5000 hours.

---

<div class="post-metadata">

### Author: ![benakansara](https://avatars.discourse-cdn.com/v4/letter/b/c2a13f/32.png) [@benakansara](https://discuss.elastic.co/u/benakansara)
#### Post date: [November 15, 2023, 10:41am UTC](https://discuss.elastic.co/t/active-alerts-showing-for-unenrolled-agents/347060/4 "2023-11-15T10:41:00Z")

</div>

From 8.11, it is possible to "untrack" alerts that are no longer relevant (due to either rule is disabled or in this case as hosts are decommissioned). You can mark the alert as "untracked" from the Alerts table. Untracked alerts will be removed from the list of active alerts and moved to "Untracked".

 ![Screenshot 2023-11-15 at 16.05.13](https://us1.discourse-cdn.com/elastic/original/3X/2/5/251272edf57eb302e4485cbe4d3356874e35a07c.png)

---

<div class="post-metadata">

### Author: ![Anna\_Misha](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/anna_misha/32/121876_2.png) [@Anna\_Misha](https://discuss.elastic.co/u/Anna_Misha)
#### Post date: [November 29, 2023, 5:20pm UTC](https://discuss.elastic.co/t/active-alerts-showing-for-unenrolled-agents/347060/5 "2023-11-29T17:20:52Z")

</div>

and what happens is I enroll the same hostname in the future? will I get teh alerts from it?
