I removed an event field from my custom log schema. However, this field still appears in Panther's Data Explorer view, displaying a null value. How can I remove this field from the view?
To resolve this issue:
Follow these instructions to edit your custom log schema, setting the Field Discovery feature to OFF.
Wait approximately 5 minutes.
Execute a Data Explorer query again, and check if the field is still present.
If the above steps don't resolve this, please contact Panther Support.