By default, event data stores are configured to ingest events. You can stop an event data store from ingesting events by using the console, AWS CLI, or APIs.
The options to Start ingestion and Stop ingestion are only available on event data stores containing either CloudTrail events (management events, data events, and network activity events), or AWS Config configuration items.
When you stop ingestion on an event data store, the event data store's state changes to STOPPED_INGESTION. You can still run queries on any events already in the event data
store. You can also copy trail events to the event data store (if it contains only CloudTrail events).
To stop an event data store from ingesting events
-
Sign in to the AWS Management Console and open the CloudTrail console at https://console.aws.amazon.com/cloudtrail/
. -
In the navigation pane, under Lake, choose Event data stores.
-
Choose the event data store.
-
From Actions, choose Stop ingestion.
-
When you are prompted to confirm, choose Stop ingestion. The event data store will stop ingesting live events.
-
To resume ingestion, choose Start ingestion.
To restart event ingestion
-
Sign in to the AWS Management Console and open the CloudTrail console at https://console.aws.amazon.com/cloudtrail/
. -
In the navigation pane, under Lake, choose Event data stores.
-
Choose the event data store.
-
From Actions, choose Start ingestion.
