Skip to main content
Panther Knowledge Base

Can I delete or rename a schema in Panther?

QUESTION

Can I delete or rename a schema in Panther?

ANSWER

It is not possible to delete or rename a custom schema, but it is possible to disable a custom schema. This is not the same as deleting it because there are a few caveats (the schema cannot be currently used by any log source, and you will not be able to create schemas in the future with the same name), but you can disable one and create a similar one under a different name. 

Custom schema field editing is in open beta as of version 1.52. Please see Panther's documentation for instructions on editing: Editing a custom schema.

 

  • Was this article helpful?