# Sythetics icmp down alert received but host and agent had been unenrolled! **URL:** \ **Category:** Elasticsearch\ **Tags:** elastic-stack-monitoring, elastic-stack-alerting\ **Created:** [April 13, 2026, 8:09am UTC](https://discuss.elastic.co/t/sythetics-icmp-down-alert-received-but-host-and-agent-had-been-unenrolled/385866 "2026-04-13T08:09:23Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![Whoami1980](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/whoami1980/32/147545_2.png) [@Whoami1980](https://discuss.elastic.co/u/Whoami1980)\ **Post date:** [April 13, 2026, 8:09am UTC](https://discuss.elastic.co/t/sythetics-icmp-down-alert-received-but-host-and-agent-had-been-unenrolled/385866/1 "2026-04-13T08:09:23Z")
host had been decommissioned. agent had been unrolled weeks back BUT still getting sythetics icmp down alert today. Kindly assist! ![image](https://us1.discourse-cdn.com/elastic/original/3X/a/c/ac4e91d4efd124947ed4f053487a3e215b7f9dcc.png) ![image](https://us1.discourse-cdn.com/elastic/original/3X/b/d/bd941b2f9578d3700ccb8120594ca76ae2eafddd.png) ---
**Author:** ![Tortoise](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tortoise/32/147587_2.png) [@Tortoise](https://discuss.elastic.co/u/Tortoise)\ **Post date:** [April 13, 2026, 8:35am UTC](https://discuss.elastic.co/t/sythetics-icmp-down-alert-received-but-host-and-agent-had-been-unenrolled/385866/2 "2026-04-13T08:35:41Z")
Hello @Whoami1980 The alert may be raised because you are still monitoring this decommissioned host via Synthetics ICMP monitoring. Go to Synthetics \> Search for the ICMP monitor which is responsible to monitor this host \> Disable this alert if it is monitoring single host which is decommissioned , if multiple hosts in that case you will have to remove the decommissioned host & save the Synthetics. Thanks!! ---
**Author:** ![Whoami1980](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/whoami1980/32/147545_2.png) [@Whoami1980](https://discuss.elastic.co/u/Whoami1980)\ **Post date:** [April 13, 2026, 8:42am UTC](https://discuss.elastic.co/t/sythetics-icmp-down-alert-received-but-host-and-agent-had-been-unenrolled/385866/3 "2026-04-13T08:42:24Z")
unfortunately i did and double confirm again hoping i miss out!! screenshot below in case i am going to the wrong place!! ![image](https://us1.discourse-cdn.com/elastic/original/3X/2/b/2bdbbc6b286e669df673911863513641b24fb39e.png) ---
**Author:** ![Tortoise](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tortoise/32/147587_2.png) [@Tortoise](https://discuss.elastic.co/u/Tortoise)\ **Post date:** [April 13, 2026, 8:44am UTC](https://discuss.elastic.co/t/sythetics-icmp-down-alert-received-but-host-and-agent-had-been-unenrolled/385866/4 "2026-04-13T08:44:19Z")
Hello @Whoami1980 Maybe the search is wrong , check the Type (4) and filter for ICMP and see those monitor. Thanks!! ---
**Author:** ![Whoami1980](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/whoami1980/32/147545_2.png) [@Whoami1980](https://discuss.elastic.co/u/Whoami1980)\ **Post date:** [April 13, 2026, 8:57am UTC](https://discuss.elastic.co/t/sythetics-icmp-down-alert-received-but-host-and-agent-had-been-unenrolled/385866/5 "2026-04-13T08:57:09Z")
@Tortoise ![image](https://us1.discourse-cdn.com/elastic/original/3X/4/8/48ab3571c118533b2ea3dff3b9adc71ebc5fefb4.png) ---
**Author:** ![Tortoise](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tortoise/32/147587_2.png) [@Tortoise](https://discuss.elastic.co/u/Tortoise)\ **Post date:** [April 13, 2026, 9:07am UTC](https://discuss.elastic.co/t/sythetics-icmp-down-alert-received-but-host-and-agent-had-been-unenrolled/385866/6 "2026-04-13T09:07:00Z")
Hello @Whoami1980 I am not sure if the search what you are performing is correct & that is the reason no records are shown. Maybe check the synthetics index & see what data is added & from where it is added via which monitor , this can only help to find the exact monitor name responsible. Thanks!! ---
**Author:** ![Whoami1980](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/whoami1980/32/147545_2.png) [@Whoami1980](https://discuss.elastic.co/u/Whoami1980)\ **Post date:** [April 13, 2026, 9:20am UTC](https://discuss.elastic.co/t/sythetics-icmp-down-alert-received-but-host-and-agent-had-been-unenrolled/385866/7 "2026-04-13T09:20:44Z")
whats the relationship of the agent.name to monitor.name? is it normal that one agent.name has xx monitor.name (if it matters) ![image](https://us1.discourse-cdn.com/elastic/original/3X/4/7/47c0e15e6c19704c03d63a52b12c4cdabc55a856.png)