Does the alert limiter functionality in Panther get activated only after an hour has passed?
Last updated: March 24, 2025
ANSWER
The alert limiter feature works as a circuit breaker to prevent alert floods in your environment and will be activated immediately when the threshold is breached, not at the end of the one-hour period. If that happens in five minutes, for example, then it will kick in after five minutes.