What is the native parser in Panther-provided schemas?
QUESTION
What does native
mean as a parser in a Panther-provided schema?
ANSWER
native
is a special parser that instructs Panther to interpret some logs differently on the backend and disregards the YAML fields.
If you want to copy a Panther-provided schema, omit the native parser.