11/12/25: Upcoming Azure.Audit log schema changes

In Panther version 1.117 (scheduled for deployment the week of December 8, 2025), Panther will change the Level field of the Azure.Audit log schema from bigint to string. To prepare for this change, please:

• Update your detections and Saved/Scheduled Searches to handle both bigint and string types.

After the v1.117 update is deployed, you can remove any logic that handles the bigint type.

Please let us know if you have any questions!