How to delete demo data in AWS app (Cloudtrail) - SplunkCloud

[ravimadabhushan]

We are observing Cloudtrail sample data (dummy users etc..) in Splunk App dashboards. I'm sure that this information is not from my account. Could you please let us know how to delete this?

[adonio]

do you have eventgen configured?
for all apps / TAs you install, make sure to delete the eventgen.conf file in the default directory

hope it helps

[ravimadabhushan]

Adonio, This is Splunk Cloud instance. I do not think I've access to any config files except from the UI. To be specific, I did not configure any of these files and not sure where to check/delete these.

[ravimadabhushan]

Just now observed that eventgen is configured to generate dummy data. While it is good to have sample data, it is not exactly useful in production usecase. Also the eventgen app doesn't have an option to disable from Splunk Cloud UI. I'm on Splunk cloud trail and it doesn't have an option to raise support request.

[adonio]

interesting,
in that case contact your splunk cloud ops team member