Can I use raw event filtering to reduce Panther ingestion costs?

Last updated: August 22, 2024

QUESTION

Can I use raw event filtering to reduce Panther ingestion costs?

ANSWER

Yes. Any raw log events dropped by an ingestion filter (both raw event filter and normalized event filter) will not contribute towards your ingestion costs.