Does Panther support archiving a log source, without deleting it?
Panther does not support archiving log sources. If you are interested in support of this feature, please contact Panther Support to put in a request.
As a workaround, you can either:
- delete the source, or
- (if the source is a custom data transport) remove all the assigned schemas from the log source, to prevent any new events from being processed.