Skip to main content
Panther Knowledge Base

What happens when an event is unclassified in Panther? Does this result in the loss of classified events too?

QUESTION

What happens when an event is unclassified in Panther? Does this result in the loss of classified events too?

ANSWER

No, if the file you are ingesting contains multiple events, and some of them fail to classify, those unclassified events will be "dropped". However, the successfully classified events will be ingested into Panther successfully.