We have updated our Terms of Service, Code of Conduct, and Addendum.

Yesterday started Cribl-Cloud (stream), now my Splunk License is chocking with data from it

Ashley Pietersen
Ashley Pietersen Posts: 1 ✭
in Cloud

Hi Anyone/support

Yesterday, started Cribl-Cloud (stream), just for testing, now my Splunk License is chocking with data from it Crible Cloud :-(.

Tried to delete all things I could delelte, still chocking my Splunk license. Deactivating my subscriiption says:
We're sorry to see you go!

We are processing the cancellation of your Cribl.Cloud organization. This process takes up to 30 days and you will get an email 7 days before the cancellation is final. If you didn't mean to cancel or having second thoughts, contact support@cribl.io.

How can I interrupt this data-stream. I had to stop my Splunk Enterprise instance for this…

Hope someone can help out.

Ashley Pietersen

Tagged:

Comments

  • Paul Dott
    Paul Dott Posts: 35 ✭✭

    Check your Cribl Monitoring dashboards to see which source is actually sending to your Splunk destination. You could disable the source or update them to route to the dev/null destination.

  • a.pietersen@eremote.nl
    a.pietersen@eremote.nl Posts: 6 ✭

    Hi Paul, thank you for responding.

    I do not find any destination anymore. The Source mentioned below I did not activate, as far as I am aware.
    I was looking for a total stop of the service, but I asume have no permission to do so.

    image.png
    image.png
  • a.pietersen@eremote.nl
    a.pietersen@eremote.nl Posts: 6 ✭

    Surprised that is showed up again after deleting it earlier (I think)

    And yes, I committed and deployed every change, as I understand it sofar

    Not connected as far as I can see , but can not delete it because it says 1 source connected ???

    image.png
    image.png

    Need to go to sleep now, Thanks for your input…
    AshleyP

  • Paul Dott
    Paul Dott Posts: 35 ✭✭

    The name of your destination makes it seem like this could be something you set up in Cribl Edge (not Stream). Is that possible?

  • a.pietersen@eremote.nl
    a.pietersen@eremote.nl Posts: 6 ✭

    Hi Paul,

    "Cribl Edge (not Stream)" You might be right, the Cribl Cloud tryout is showing more then only Stream.

    [Update, this morning]

    • Re-checked our Cribl Cloud portal based on your suggestion,
    • deleted every Cribl Edge source and destination (local as well defined in de the portal)
    • Restored our Splunk Ent. service, no flooding at the moment 🙂
    • Now I'm thinking of building a local streamer on a local VM so I can "stop" it at any time.
      Although I have limited Linux expertise. 
    • I will need to look into to some more explaining video's and documents
    • Thank you for your support, Top!
    • Have a nice day.

    Regards,
    AshleyP

Categories