Edit your Amazon CloudWatch Logs data inputs for Data Manager

Consider a scenario where you onboarded data for AWS accounts, and you need to to edit your data inputs after onboarding. At any given time during the edit, you can only take one kind of action at a time.

1. From the Splunk Cloud menu bar, select Data Manager.
2. From the Data Management page, find the AWS data input you want to revise, and click the Edit action.

Edit your data inputs after single account onboarding

During an edit of a single account data input, you can only edit regions. The account itself cannot be changed or edited.

You can complete the following actions through Data Manager:

• Add one or more new regions, but keep the existing regions as-is.
• Remove one or more existing regions, but don't add new regions.

For example, you can only add or remove regions as separate actions. You cannot add and remove at the same time.

Edit your data inputs after multiple account onboarding

During an edit of a multiple account data input, you can edit accounts and regions.

You can complete the following actions through Data Manager

• Add one or more new accounts, but keep the regions as-is.
• Remove one or more existing accounts, but keep the regions as-is.
• Add one or more regions, but keep the data accounts as-is.
• Remove one or more existing regions, but keep the data accounts as-is.
• Add one or more new accounts and add one or more new regions, but don't remove existing accounts or regions.
• Remove one or more existing accounts and remove one or more existing regions, but don't add new accounts or regions.

For example, you can only add or remove regions as separate actions. You cannot add and remove at the same time. The example remains true for accounts as well. You can only add or remove accounts as separate actions. You cannot add and remove at the same time.