Skip to main content
Panther Knowledge Base

Do p_ fields automatically added by Panther count in total size of billable logs


Do the p_ fields such as p_event_time, that Panther automatically adds, count in the total size of logs the customers are billed for?


These additional p_fields do not count in the total size of the logs the customers are billed for. It is the uncompressed data sent that are included.

These fields are our Standard Fields, as mentioned in our documentation.

The following relevant articles from our Knowledge Base might be useful, as they provide additional context on the ingestion limits:
• Is there a maximum size limit on data that Panther ingests?
• Understanding ingestion and usage limits in Panther

  • Was this article helpful?