---
title: "Rolling back the Netprobe"
description: "Learn how to roll back the Netprobe on EC2 instances using the RollbackNetprobe.yaml CloudFormation template and AWS Systems Manager."
url: "https://docs.itrsgroup.com/docs/geneos/7.11.0/collection/cloud-native-deployments/deploying-via-aws-cloudformation/rollback-netprobe/index.html"
---
The `RollbackNetprobe.yaml` CloudFormation template rolls back the Netprobe on existing EC2 instances using the AWS Systems Manager (SSM) by restoring the most recent backup archive created under `<NetprobeInstallDirectory>/backup/netprobe/` and restarting the `netprobe.service`.

## Prerequisites

- The target EC2 instances must have an [SSM Agent](https://docs.aws.amazon.com/systems-manager/latest/userguide/ssm-agent.html) installed and running.
- Target instances must have an IAM instance profile attached with the following permissions:
  - `AmazonSSMManagedInstanceCore` (for SSM communication)
- The `netprobe.service` systemd unit must exist on the instances.
- A backup archive must exist at `<NetprobeInstallDirectory>/backup/netprobe/netprobe-*.tar.gz`. This is created by the update process.

## Input parameters

### Target EC2 configuration

| Parameter | Description | Default | Required |
|-----------|-------------|---------|----------|
| `InstanceIds` | Comma-separated list of existing EC2 Instance IDs |  | Yes |

### Netprobe configuration

| Parameter | Description | Default | Required |
|-----------|-------------|---------|----------|
| `NetprobeInstallDirectory` | Directory where Netprobe is installed | ~/geneos | No |

## Verification and debugging

Run the following commands if you need to verify or debug your deployment.

### View template execution logs

```bash
ssh -i <privatekey> <user>@<host> "sudo cat /var/log/amazon/ssm/amazon-ssm-agent.log"
```

### Check the service status

```bash
ssh -i <privatekey> <user>@<host> "systemctl is-active <service>.service"
```

### Download the logs

```bash
ssh -i <privatekey> <user>@<host> "sudo tar -cvz -C "cd <install_dir> && find <service> -type f -name '*.log' -print0 | sudo tar --null -czf - --files-from -" > <service>-logs.tar.gz
```