QUESTION

Do log source filters in Panther combine using the OR operation, or AND?

ANSWER

Log source filters combine using the OR logic operator. In other words, when multiple filters are applied to a single log source, the filter applies when just one of the conditions passes.