Disable or delete Cribl integration

Learn more on disabling or deleting Cribl integrations in Cortex XSIAM.

Use the Disable and Delete options with extreme caution.

• Disabling the integration will cease streaming from Cribl.
• Deleting the integration will erase the integration completely and will require reconfiguration, because the original authorization token will be lost.

Disable the integration with Cribl

1. In Cortex XSIAM, search for and select the Cribl integration on the Data Sources & Integrations page, right-click the instance and select Disable.

Delete the integration with Cribl

1. In Cortex XSIAM, search for and select the integration on the Data Sources & Integrations page, right-click the instance and select Delete.
2. In the Are you sure? dialog box, click Delete.