Skip to main content
Panther Knowledge Base

Can I backfill the logs of a new log source into Panther?

QUESTION

 I have a new log source for an organization I need to monitor. Would it be possible to backfill the logs into Panther for the last XX days?

ANSWER

Yes, it is possible to backfill the logs into Panther. To do that, please raise a request to our Support team and provide them with the log source ID and the exact timestamp that you want the backfilling to start from. Once your request is submitted, the Support team will engage the engineers, who may have some additional questions prior to starting the procedure.

Please note that there may be limitations on the time range depending on the log source. For example, the GitHub puller can backfill data up to a specific amount of time.

 

  • Was this article helpful?