Can I reduce my ingested bytes quota by removing or masking the fields that I do not need in Panther?
QUESTION
Can I reduce my ingested bytes quota by removing or masking the fields that I do not need in Panther?
ANSWER
Removing or masking fields in the log event schema should not affect the bytes ingested. A more effective approach would be to add log source filters to your implementation. In this scenario, the entire event would be dropped and not included in the total quota.