Notifications and Errors
Get real-time notifications for crucial information about your Panther instance
Overview
Notifications are in open beta starting with Panther version 1.96, and are available to all customers. Please share any bug reports and feature requests with your Panther support team.
In-Console notifications provide information about the performance of your Panther instance. You can configure the types of notifications you would like to receive. There are three types of notifications:
Notifications in Panther are specific to each user, meaning one user marking a certain notification as read will not affect the read/unread status of the same notification for a second user in the same Panther instance.
Even if you have used RBAC per log type to restrict a certain role from viewing alerts related to a given log type, users with that role will still be able to see notifications related to that log type.
Viewing notifications
To view a list of your notifications, click the bell icon in the upper-right corner of your Panther Console:
Real-time notifications will slide in at the bottom-right corner of your browser window:
Types of notifications
System Errors
System Errors alert you when part of your Panther platform is not functioning as expected. They are sent as in-app notifications, in addition to being sent as alerts to destinations configured to receive System Errors.
Learn more about System Errors, including the different types, on System Errors.
System Notifications
System Notifications are sent only as in-app notifications, unlike System Errors.
Currently, the only type of System Notification is Ingestion capacity limit. This notifies you when you are nearing your data ingestion limit for the month.
Detection Notifications
Detection Notifications are sent only as in-app notifications, unlike System Errors.
These notifications contain information about asynchronous processing of your detection content to give you more insight into background processes.
Currently, the only type of Detection Notifications are Detection Pack update successes and errors. (Detection errors, including rule and scheduled rule errors, do not generate Detection Notifications.)
Setting notification preferences
To configure the types of notifications you would like to receive:
In the upper-right corner of your Panther Console, click the bell icon to open the Notifications slide-out panel.
On the right side of the tiles for each notification type, click the toggle
ON
orOFF
.
Managing notifications
Archive or mark notifications as read, either individually or in bulk.
Archiving notifications
To archive a single notification:
Open the Notifications slide-out panel. The Inbox tab will be shown.
To bulk archive all notifications:
Open the Notifications slide-out panel. The Inbox tab will be shown.
Marking notifications as read
To mark a single notification as read:
Open the Notifications slide-out panel. The Inbox tab will be shown.
To bulk mark all notifications as read:
Open the Notifications slide-out panel. The Inbox tab will be shown.
Last updated