Skip to main content
Panther Knowledge Base

Can I move S3 objects without re-ingesting into Panther?

  1. Last updated
  2. Save as PDF

QUESTION

I have Panther ingested objects in a root directory that I want to move into directoryA. Can I move the S3 objects without re-ingesting into Panther?

ANSWER

If you create directoryA and move the objects, this will generate a new SQS event about the new files being written. Panther will then re-ingest it.

To work around this, create a directoryB and change the S3 log source prefix to only directoryB. Then create directoryA and move the objects into it. When you add the prefix to ingest from directoryA afterwards, there is no current event that will cause a re-ingest.