All Apps and Add-ons

How to delete demo data in AWS app (Cloudtrail) - SplunkCloud

ravimadabhushan
New Member

We are observing Cloudtrail sample data (dummy users etc..) in Splunk App dashboards. I'm sure that this information is not from my account. Could you please let us know how to delete this?

0 Karma

adonio
SplunkTrust
SplunkTrust

do you have eventgen configured?
for all apps / TAs you install, make sure to delete the eventgen.conf file in the default directory

hope it helps

0 Karma

ravimadabhushan
New Member

Adonio, This is Splunk Cloud instance. I do not think I've access to any config files except from the UI. To be specific, I did not configure any of these files and not sure where to check/delete these.

0 Karma

ravimadabhushan
New Member

Just now observed that eventgen is configured to generate dummy data. While it is good to have sample data, it is not exactly useful in production usecase. Also the eventgen app doesn't have an option to disable from Splunk Cloud UI. I'm on Splunk cloud trail and it doesn't have an option to raise support request.

0 Karma

adonio
SplunkTrust
SplunkTrust

interesting,
in that case contact your splunk cloud ops team member

0 Karma
Register for .conf21 Now! Go Vegas or Go Virtual!

How will you .conf21? You decide! Go in-person in Las Vegas, 10/18-10/21, or go online with .conf21 Virtual, 10/19-10/20.