There doesn't seem to be a way to manually remove data sources from SIEM or to change how soon they are marked as Inactive. I spoke to support and they said this is set to 30 days. Can there be an option to make it 7 days or 14 days?

This is in the event a customer deploys Huntress agent via Ninjaone to devices that don't need it and there is no way to stop it from billing once this happens.