Mindflow Destination (Beta)

Configuring Mindflow as an alert destination in your Panther Console

Overview

The Mindflow alert destination is in open beta starting with Panther version 1.111, and is available to all customers. Please share any bug reports and feature requests with your Panther support team.

Destinations are integrations that receive alerts from rules, policies, system health notifications, and rule errors. Panther supports configuring Mindflow as the destination where you will receive alerts.

How to set up Mindflow alert destinations in Panther

To set up this integration, you will create a workflow in Mindflow with a webhook trigger. In addition to receiving Panther alerts, you can also call the Panther API from within workflows in Mindflow.

Step 1: Create a Flow in Mindflow

1. In your Mindflow console, click Flows.

2. In the upper-right corner, click + Create.

3. In the upper-left corner, replace Untitled flow with a descriptive name, like Panther alerts.

4. Click the gear (settings) icon, then the Triggers tab.

5. Under Triggers configuration, click the Webhook toggle on.

6. Copy the Webhook (asynchronous) value, and store it in a secure location. You will need it in Step 2, below.

7. (Optional) Add additional steps to the Flow. You may wish to call the Panther API from subsequent steps.

Step 2: Configure the Mindflow alert destination in Panther

1. In the left-hand navigation bar of your Panther Console, click Configure > Alert Destinations.

2. Click +Add your first Destination.

   • If you have already created Destinations, click Create New in the upper right side

     of the page to add a new Destination.

3. Click Mindflow.

4. Fill out the form to configure the Destination:

   • Display Name: Enter a name for your Mindflow alert destination.

   • Custom Webhook URL: Enter the webhook URL you generated in Mindflow in Step 1.

   • Severity: Select the severity level of alerts to send to Mindflow.

   • Alert Types: Select the alert types to send to Mindflow.

   • Log Types: By default, we will send alerts from all log types. Specify log types here if you want to only send alerts from specific log types.
5. Click Add Destination.

6. (Optional) Click Send test alert.

   • If the test alert is delivered successfully, the Flow you created in Mindflow in Step 1 will say Deploy in progress (manual).