Can I use raw event filtering to reduce Panther ingestion costs?
QUESTION
Can I use raw event filtering to reduce Panther ingestion costs?
ANSWER
Yes. When raw log events are withheld from ingestion by the "raw event filters" described in the docs linked above, these events do not count toward ingestion costs.