Skip to main content
Panther Knowledge Base

Can you have two different fields going to the same UDM field in Panther?

  1. Last updated
  2. Save as PDF

QUESTION

Can you have two different fields going to the same unified data model (UDM) field?

Example:

Mappings:
  - Name: actor_user
    Path: user
  - Name: actor_user
    Path: actor

ANSWER

While it is possible to have two different fields going to the same UDM field, it is not recommended; the last declared field value will overwrite the other's value.

In the example above, user's value will be replaced by actor's value.