Is there a Panther-managed schema for 1Password auditevents logs?
Not currently. Panther supports 1Password ItemUsage and SigninAttempt logs natively, but not AuditEvents logs. As a workaround, you could potentially use a data transport to get these logs into Panther. See📄 How to add an unsupported log source to Panther and request for new log sources
Reach out to your Customer Success Manager or Panther Support if you'd like to see this implemented.