Skip to main content
Panther Knowledge Base

If I delete a detection, can I still access the alerts/matched events?

  1. Last updated
  2. Save as PDF

QUESTION

If I delete a detection, can I still access the alerts? What about the individual matched events?

ANSWER

Yes. Your alert history is accessible from the Alerts and Errors panel. To directly access the events, you need to query the rule_matches table in the Data Explorer.