Skip to main content
Panther Knowledge Base

Can I set Panther to ignore duplicate events from my log source?

QUESTION

My log source malfunctioned, or I accidentally retried sending logs after they were already successfully ingested. This generated some log events twice. Can Panther deduplicate these events so I only have one of each in my data lake?

ANSWER

Panther does not support deduplication of incoming log events. If you are interested in this feature, please reach out to your Panther Support team to submit a feature request.

  • Was this article helpful?