MineMeld - Office 365 - How can I disable miners?

[scottsander]

I am working on Office 365 control and I have discovered that MineMeld seems to be the best way to do this.  To that end, I have set up a MineMeld server and imported the PAN-provided script for Office 365.

There are some Office 365 features that we do not want to allow at this time, such as OneNote, SharePoint Online, and Yammer.  I see that I can delete nodes, but what if I want to use them in the near future?  Is there some way to just disable a miner but otherwise leave it available for use?  I see that the details of one of the nodes including a label next to "Output" that says "Enabled", but I don't see any way to disable it other than deleting it.

Or should I just let MineMeld do its thing and use the Office 365 App-IDs in the PAN firewall to control the access?

[xhoms · Accepted solution]

@scottsander : What about removing the miners you do not want to use from the list of "inputs" in the corresponding processors?

[scottsander]

That looks like it will work.  The interface doesn't make it obvious that you can do that.  A simple enable/disable switch on miners, processors, and outputs would probably be better, but this will work in leiu of such a feature.

Thanks!

[Hugh.Kelley]

This does not seem to stop the miner polling (and throwing errors if the remote TAXII server is temporarily offline).   Is there a way to pause polling?