QUESTION

Does Panther support archiving a log source, without deleting it?

ANSWER

Panther does not support archiving log sources. If you are interested in support of this feature, please contact Panther Support to put in a request.

As a workaround, you can either:

  1. delete the source, or

  2. (if the source is a custom data transport) remove all the assigned schemas from the log source, to prevent any new events from being processed.