Skip to main content
Sumo Logic

Pause and Resume a Source

You can pause some types of Sources to stop the Sources from sending data to Sumo Logic, and then resume at a later time.

The following Sources can use pause/resume:

  • S3 Sources: Amazon S3, AWS Elastic Load Balancing, Amazon CloudFront, AWS CloudTrail, AWS CloudWatch Metrics, AWS Config, and Amazon S3 Audit
  • Metrics Sources: AWS CloudWatch metrics

To pause a Source:

Locate the Source on the Manage > Collection page, and click Pause. Click the Resume link when you are ready for the Source to start sending data again.

pause resume.png

Additional information about pause and resume:

  • When a Source is paused, Sumo Logic continues to ingest the files that were already discovered, but doesn't scan any new ones.
  • The AWS CloudWatch Source ingests data points only from the past two hours, so you will lose data if you pause the CloudWatch Source for more than two hours. Example: If a CloudWatch Source is paused at 6:00am and resumed at 10:00am, the data points generated between 6:00am and 8:00am are lost.