Torq Destination
Configuring Torq as an alert destination in your Panther Console
Last updated
Configuring Torq as an alert destination in your Panther Console
Last updated
The Torq alert destination is in open beta starting with Panther version 1.107, and is available to all customers. Please share any bug reports and feature requests with your Panther support team.
Destinations are integrations that receive alerts from rules, policies, system health notifications, and rule errors. Panther supports configuring Torq as the destination where you will receive alerts.
In your Torq console, navigate to Integrations > Trigger > Panther.
Click Add.
In the New Integration pop-up modal, enter a descriptive Integration Name.
Click Add.
Copy the resulting Endpoint value and store it in a secure location, as you will need it in the following step.
In the left-hand navigation bar of your Panther Console, click Configure > Alert Destinations.
Click +Add your first Destination.
If you have already created Destinations, click Create New in the upper right side of the page to add a new Destination.
Click Torq.
Fill out the form to configure the Destination:
Display Name: Enter a descriptive name.
Torq Webhook URL: Enter the webhook URL you generated in Step 1.
Severity: Select the severity level of alerts to send to this Destination.
Alert Types: Select the alert types to send to this Destination.
Click Add Destination.
On the final page, optionally click Send Test Alert to test the integration. When you are finished, click Finish Setup.
For more information on alert routing order, modifying or deleting destinations, and workflow automation, please see the Panther docs: Destinations.
Log Type: By default, we will send alerts from all log types. Specify log types here if you want to only send alerts from specific log types.
