Torq Destination

Configuring Torq as an alert destination in your Panther Console

Overview

The Torq alert destination is in open beta starting with Panther version 1.107, and is available to all customers. Please share any bug reports and feature requests with your Panther support team.

Destinations are integrations that receive alerts from rules, policies, system health notifications, and rule errors. Panther supports configuring Torq as the destination where you will receive alerts.

How to set up Torq alert destinations in Panther

Step 1: Create a Panther trigger in Torq

1. In your Torq console, navigate to Integrations > Trigger > Panther.

2. Click Add.
3. In the New Integration pop-up modal, enter a descriptive Integration Name.
4. Click Add.

   • Copy the resulting Endpoint value and store it in a secure location, as you will need it in the following step.

     

Step 2: Configure the Torq alert destination in Panther

1. In the left-hand navigation bar of your Panther Console, click Configure > Alert Destinations.

2. Click +Add your first Destination.

   • If you have already created Destinations, click Create New in the upper right side of the page to add a new Destination.

3. Click Torq.

4. Fill out the form to configure the Destination:

   • Display Name: Enter a descriptive name.

   • Torq Webhook URL: Enter the webhook URL you generated in Step 1.

   • Severity: Select the severity level of alerts to send to this Destination.

   • Alert Types: Select the alert types to send to this Destination.

   • Log Type: By default, we will send alerts from all log types. Specify log types here if you want to only send alerts from specific log types.
5. Click Add Destination.

6. On the final page, optionally click Send Test Alert to test the integration. When you are finished, click Finish Setup.

Additional Information on Destinations

For more information on alert routing order, modifying or deleting destinations, and workflow automation, please see the Panther docs: Destinations.