Skip to main content
Panther Knowledge Base

What is the native parser in Panther-provided schemas?

QUESTION

What does native mean as a parser in a Panther-provided schema?

 

ANSWER

native is a special parser that instructs Panther to interpret some logs differently on the backend and disregards the YAML fields.

If you want to copy a Panther-provided schema, omit the native parser.