Cloud Security logs have incorrect label and id values in Panther
Last updated: September 3, 2024
Issue
When investigating AWS cloud resources, the p_source_label and p_source_id values for some resource entries don't match their corresponding IntegrationLabel and IntegrationID values, respectively.
Resolution
We recommend using IntegrationLabel and IntegrationID rather than p_source_label and p_source_id for the time being. If you have any questions, please contact the Panther support team.
The Panther engineering team is aware of this issue and is working on a permanent solution.
Cause
This issue occurs due to a bug in Panther.