Supported Logs
Panther supports 100+ security log types across 50+ different categories
Overview
Panther has native schema support for each of the sources listed below, with different supported methods to ingest data depending on the log source.
If you would like to ingest logs from a source not listed as Panther-supported, you can either define your own Custom Log source or request support of a new log source.
For information on tracking logged activity within your Panther instance, please see Panther Audit Logs.
View all Panther-supported log sources in the list below or in your Panther Console, by navigating to the Log Sources > Add New Source page. There, you can browse sources in the grid or use the search bar to find a source:
Working with Panther-managed schemas
For each Panther-supported log source, Panther produces and maintains associated log schemas. You can find the schemas associated to each source on the source's documentation page. Certain Panther-managed schemas can use field discovery.
Testing a Panther-managed schema
If you'd like to validate that a Panther-managed schema will parse your logs correctly, you can test sample logs against the Panther-managed schema (just like you can test logs against a custom schema). Follow the steps below:
In the left-hand navigation bar of your Panther Console, click Configure > Schemas.
Click on the name of a schema labeled
PANTHER MANAGED.In the upper-right corner, click Test Schema.
Choose Upload Sample file or Paste sample event(s).
After uploading your sample(s), in the upper-right corner, click Run Test.
Cloning a Panther-managed schema
It is not possible to edit a Panther-managed schema. Instead, you can clone the schema to create a copy of it, which you can edit. To clone a schema:
In the left-hand navigation bar of your Panther Console, click Configure > Schemas.
Click on the name of a schema in the list.
In the upper-right corner of the schema's details page, click Clone.
For information on editing a custom schema, see the Custom Logs documentation.
Panther-supported log sources
Panther offers built-in support for each of the following log sources. Click a tile to learn more about that source:
Troubleshooting supported logs
Visit the Panther Knowledge Base to view articles about supported log sources that answer frequently asked questions and help you resolve common errors and issues.
Last updated
Was this helpful?