Skip to main content
Panther Knowledge Base

Why is my log source classification error in Panther returning an empty object?


When trying to ingest a log source in Panther, I'm getting a classification error that returns empty:

"errors": []


To resolve this issue:

  • Please check if your log source contains multiple CSV schemas. If so, please edit and add the columns fields for the CSV schemas.


This issue occurs when a log source has multiple CSV schemas without the columns field. Panther requires the columns fields to differentiate between logs.



  • Was this article helpful?