We deployed our first Splunk in AWS using the tooling in AWS to do this and see that there is unallowed traffic calling out from our Splunk to beam.scs.splunk.com, which I see is for Splunk Cloud Edge processor, which we have no intention to use. We would like to disable this traffic but there is no documentation on it. Can this be done?
I did install adguard (DNS blocker) and sees that beam.scs.splunk.com is one of the default blocked sites.