Troubleshooting
This page provides help for common issues you may encounter with Panther deployment or usage.
Deployment
First Invitation Email
- 1.Has the deployment finished successfully? The CloudFormation stack(s) should be
CREATE_COMPLETE. - 2.Check your spam folder - the email is sent from
[email protected] - 3.From the CloudFormation web console, double-check the
FirstUserEmailparameter in your stack - you may have mistyped the email. If so, read on. - 4.(Optional) Check the Panther CloudWatch dashboards for any errors and/orsearch the
/aws/lambda/panther-cfn-custom-resourcesfor error messages to help identify the root cause of the issue.
If you didn't receive the invite for whatever reason, you'll need to send another invite manually.
- 1.
- 2.Run the tool, e.g.:
./invite-darwin-amd64- it will prompt you for the user name and email
If your email already exists in Panther, you can try adding an email suffix:
[email protected]No Rules or Policies
Every Panther deployment should automatically install many Python rules and policies. If you don't see any on your first login, there may have been an issue downloading them during deployment.
To fix:
- 1.
- 2.Login to your Panther Console and navigate to Cloud Security > Policies (or Log Analysis > Rules)
- 3.Click "Create New" and choose "Bulk". Upload the zipfile you downloaded in step 1.
- 4.(Optional) Check the Panther CloudWatch dashboards for any errors and/orsearch the
/aws/lambda/panther-cfn-custom-resourcesfor error messages to help identify the root cause of the issue.
Cloud Security
My Resources Haven't Updated
When configuring Cloud Security for a given account, the default scan interval is 24h.
To reduce this interval, onboard CloudTrail data from the given account, or configure real-time events.
Last modified 2mo ago