Skip to main content

Hi Anyone/support

Yesterday, started Cribl-Cloud (stream), just for testing, now my Splunk License is chocking with data from it Crible Cloud 😞.

Tried to delete all things I could delelte, still chocking my Splunk license. Deactivating my subscriiption says:
We're sorry to see you go!

We are processing the cancellation of your Cribl.Cloud organization. This process takes up to 30 days and you will get an email 7 days before the cancellation is final. If you didn't mean to cancel or having second thoughts, contact support@cribl.io.

How can I interrupt this data-stream. I had to stop my Splunk Enterprise instance for this…

Hope someone can help out.

Ashley Pietersen

Check your Cribl Monitoring dashboards to see which source is actually sending to your Splunk destination. You could disable the source or update them to route to the dev/null destination.

Hi Paul, thank you for responding.

I do not find any destination anymore. The Source mentioned below I did not activate, as far as I am aware.
I was looking for a total stop of the service, but I asume have no permission to do so.

930_564eff428244413e9dfc8e8e47243bfc.png930_51322e3cfe854bd88c93a2336f6b8907.png

Surprised that is showed up again after deleting it earlier (I think)

And yes, I committed and deployed every change, as I understand it sofar

Not connected as far as I can see , but can not delete it because it says 1 source connected ???

930_b05dd450514b488db2481c817b9aa5b7.png930_a473e99dd1c54f05b16b0d7ea12ea156.png

Need to go to sleep now, Thanks for your input…
AshleyP

The name of your destination makes it seem like this could be something you set up in Cribl Edge (not Stream). Is that possible?

Hi Paul,

"Cribl Edge (not Stream)" You might be right, the Cribl Cloud tryout is showing more then only Stream.

[Update, this morning]

  • Re-checked our Cribl Cloud portal based on your suggestion,
  • deleted every Cribl Edge source and destination (local as well defined in de the portal)
  • Restored our Splunk Ent. service, no flooding at the moment 🙂
  • Now I'm thinking of building a local streamer on a local VM so I can "stop" it at any time.
    Although I have limited Linux expertise. 
  • I will need to look into to some more explaining video's and documents
  • Thank you for your support, Top!
  • Have a nice day.

Regards,
AshleyP

Reply


Terms & ConditionsCookie settings