QUESTION

When I try to download data from Panther's Search tool, it downloads successfully but the data differs from what I expect, and what I see with similar queries in the Data Explorer. What is the difference?

ANSWER

When doing an export from this Search page, we format the data for each row as a JSON object in the row_object column, and we also omit fields with null values. This is the same data you'd see when querying the same tables and fields in the Data Explorer, reformatted for enhanced readability. If you have additional questions about this format, please contact Panther Support.