Skip to main content
Panther Knowledge Base

Why are S3 objects are being overwritten while Panther’s log processing is reading them?

Issue

We noticed that S3 objects are being overwritten while Panther’s log processing is reading them in an S3 log source.

Resolution

To resolve this issue:

  • Please verify whether you are using the app Export Everything to populate the S3 bucket. If you are, upgrade the app to the latest version.

If you are not using Export Everything, please reach out to Panther's support team for further troubleshooting.

Cause

This issue can occur if you are using an outdated version of the Export Everything app.