Migrating log data to a new data label

Has anyone here ingested data to SIEM via a temporary label and then migrated to a new data label? We recently requested a new label for a net new data source and we're looking for the best way to migrate to this new data label.

From what were hearing, it sounds like we need to start over and turn off the old feed and start a new feed with the same label. However, it seems that we cannot have duplicate logs in Chronicle (with the old logs persisting) without having errors. Would we need to manually delete or modify the stale logs from the previous data label in Chronicle in order to push data to this new data label?

0 1 189
1 REPLY 1

Have we tried to delete all feeds associated with the problematic Data Labels and then recreated a brand new feed targeting the desired Data Label? 

I have a suspicion that the Feeds might have been arguing, trying to pull from the same location.