Can I archive a log source in Panther?
QUESTION
Does Panther support archiving a log source, without deleting it?
ANSWER
Panther does not support archiving log sources. If you are interested in support of this feature, please contact Panther Support to put in a request.
As a workaround, you can either:
- delete the source, or
- (if the source is a custom data transport) remove all the assigned schemas from the log source, to prevent any new events from being processed.