Skip to main content
Panther Knowledge Base

Do summary attributes get stored in the panther_rule_matches database view in Panther?

  1. Last updated
  2. Save as PDF

QUESTION

Do summary attributes get stored in the panther_rule_matches database view in Panther?

ANSWER

No. Currently, the summaries in the Panther Console are populated by taking the summary attributes in the detection rules and dynamically querying Snowflake. The results of the summaries are not stored anywhere at this time.