Can I use raw or normalized event filtering to reduce Panther ingestion costs?
Yes. Any raw log events dropped by an ingestion filter (both raw event filter and normalized event filter) will not contribute towards your ingestion costs.