Stop and start event ingestion with the console - Amazon CloudTrail
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Stop and start event ingestion with the console

By default, event data stores are configured to ingest events. You can stop an event data store from ingesting events by using the console, Amazon CLI, or APIs.

The options to Start ingestion and Stop ingestion are only available on event data stores containing either CloudTrail events (management and data events), or Amazon Config configuration items.

When you stop ingestion on an event data store, the event data store's state changes to STOPPED_INGESTION. You can still run queries on any events already in the event data store. You can also copy trail events to the event data store (if it contains only CloudTrail management or data events).

To stop an event data store from ingesting events

  1. Sign in to the Amazon Web Services Management Console and open the CloudTrail console at https://console.amazonaws.cn/cloudtrail/.

  2. In the navigation pane, under Lake, choose Event data stores.

  3. Choose the event data store.

  4. From Actions, choose Stop ingestion.

  5. When you are prompted to confirm, choose Stop ingestion. The event data store will stop ingesting live events.

  6. To resume ingestion, choose Start ingestion.

To restart event ingestion

  1. Sign in to the Amazon Web Services Management Console and open the CloudTrail console at https://console.amazonaws.cn/cloudtrail/.

  2. In the navigation pane, under Lake, choose Event data stores.

  3. Choose the event data store.

  4. From Actions, choose Start ingestion.