You can pause some types of Sources to stop the Sources from sending data to Sumo Logic, and then resume at a later time.
The following Sources are eligible for pause/resume:
- S3 Sources: Amazon S3, AWS Elastic Load Balancing, Amazon CloudFront, AWS CloudTrail, AWS CloudWatch Metrics, AWS Config, and Amazon S3 Audit
- Metrics Source: AWS CloudWatch metrics.
To pause a Source:
Locate the Source on the Manage > Collection page, and click Pause. Click the Resume link when you are ready for the Source to start sending data again.
Additional information about pause and resume:
- When a Source is paused, Sumo Logic continues to ingest the files that were already discovered, but doesn't scan any new ones.
- The AWS CloudWatch Source ingests data points only from the past two hours, so you will lose data if you pause the CloudWatch Source for more than two hours. Example: If a CloudWatch Source is paused at 6:00am and resumed at 10:00am, the data points generated between 6:00am and 8:00am are lost.