Skip to main content
Panther Knowledge Base

Does Panther raise an alarm when there are additional event values not included in the schema?

  1. Last updated
  2. Save as PDF

QUESTION

When new events are parsed which have values for columns that are not included in the schema, will I be notified through the log source health reporting system?

ANSWER

Currently, Panther will only parse the fields that you have specified in the schema and will not raise an alarm if there are any extra fields in the actual events.

If you are interested in supporting this feature, please contact Panther Support and submit a request.