If I delete a log source in Panther, is its data deleted?

QUESTION

If I delete a log source, is the related data deleted?

ANSWER

No. Your data will remain available in the Panther Console.

The log data will remain in the data lake after a log source is deleted. Deleting a log source only stops future logs from being ingested by that log source — it does not affect previously ingested data. You can still query those logs in the Panther Console using Data Explorer or Search!