Skip to main content
Panther Knowledge Base

Can Panther parse logs in ORC format from Apache Hive?

QUESTION

Can Panther parse logs in ORC format from Apache Hive?

ANSWER

No, Panther cannot parse logs in ORC format. As a workaround, you can convert your ORC files into a format that Panther can parse (JSON or CSV with headers).

Apache provides a free tool you can use to convert ORC files to JSON, which is a format that Panther can parse. You would need to provide your own Log Schemas for these converted ORC files, as Panther does not have any native ORC support. 

You can read about Apache's CLI tool here. Note that this tool is not tested or maintained by Panther; we suggest it as an option for you to consider.