Skip to main content
Panther Knowledge Base

I want to ingest a specific field from my log event. Can I do that in Panther?

  1. Last updated
  2. Save as PDF

QUESTION

I want to ingest a specific field from my log event. Can I do that in Panther?

For the example below, I only want to ingest data:

{
    "data": [
        { ... event #1 ... },
        { ... event #2 ... },
        { ... event #3 ... }
    ],
    "fieldA":false,
    "fieldB":"randomstring",
    "fieldC":1234567890
}

ANSWER

 

Panther does not currently support specific field ingesting such as that example. However, please reference this article and contact Support to express your interest in having data transformation for Panther's ingestion pipeline!