Skip to main content
Panther Knowledge Base

Does Panther raise an alarm when there are additional event values not included in the schema?


When new events are parsed which have values for columns that are not included in the schema, will I be notified through the log source health reporting system?


Currently, Panther will only parse the fields that you have specified in the schema and will not raise an alarm if there are any extra fields in the actual events.

If you are interested in supporting this feature, please contact Panther Support and submit a request.