When looking at some of the scheduled queries in my Panther Console, it appears that they are updated by Panther (Deactivated). What does it mean?
(When a user is deactivated in Panther, what happens to the scheduled queries created by them?)
This happens when the user who created the saved query is no longer an active Panther user. To prevent backend errors, scheduled queries owned by deactivated users are automatically disabled.
If you’d like to restore these queries, you’ll need to clone them and create a new copy under an active user. Additionally, please update any associated scheduled rules to reference the new scheduled query to ensure they continue functioning properly.