2/5/25: Upcoming Panther changes to Lookup Table validation and databases

Hi team,

We’d like to let you know about upcoming Panther changes that may require your action:

• ❗ This is a reminder that next week your Panther instance will be updated to a patch version containing new Lookup Table selector validation. This will ensure logs are properly enriched, but you may see errors if you haven’t taken necessary steps outlined in this Knowledge Base article.

• 🚧 Panther will stop writing to three databases in June 2025: panther_rule_matches, panther_rule_errors, and panther_views. Data written to these locations is already being concurrently written to a new location, and no historical data will be lost. Learn more about the change in this Knowledge Base article.

Please reach out if you have any questions or concerns!