Snowflake Functions

PantherFlow Snowflake functions

PantherFlow is in open beta starting with Panther version 1.110, and is available to all customers. Please share any bug reports and feature requests with your Panther support team.

snowflake.func()

snowflake.func(func_name: string [, arg1: any, ... ]) -> any

Call any function in Snowflake. This function simply acts as a passthrough.

Example:

panther_logs.public.aws_alb
| project inCidr=snowflake.func("REGEXP_LIKE", clientIp, "^192\\.168\\.1\\.(25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[0-9]{1,2})$")