Is there a Panther-managed schema for 1Password auditevents logs?
Not currently. Panther supports 1Password ItemUsage and SigninAttempt logs natively, but not AuditEvents logs. As a workaround, you could potentially use a data transport to get these logs into Panther.
Reach out to your Customer Success Manager or Panther Support if you'd like to see this implemented.