Can I use raw event filtering to reduce Panther ingestion costs?
QUESTION
Can I use raw event filtering to reduce Panther ingestion costs?
ANSWER
Yes. Any raw log events dropped by an ingestion filter (both raw event filter and normalized event filter) will not contribute towards your ingestion costs.