Why can't I select the most recent date when configuring a Data Replay in Panther?

Last updated: May 15, 2026

QUESTION

When setting up a log replay on a detection, I'm unable to select the current or most recent date in the date picker. Is this a bug?

ANSWER

This is intentional, not a bug. Panther's Data Replay feature runs against data stored in S3, and access to data from the most recent 24 hours is locked by design. As a result, the current day and any date within the last 24 hours will appear greyed out and unselectable in the date picker.

To work around this:

  • Wait until the date you want is more than 24 hours old before including it in your replay window (e.g. to include May 1, wait until after May 2 00:00 in your replay timezone).

  • Alternatively, set your end date to the day prior (e.g. end on April 30 instead of May 1).

Data Replay also has a 14-day lookback limit, only data from the last 14 days is available for replay.

For more details, please check: