Skip to main content
Panther Knowledge Base

Receiving a high severity alert in Panther for a detection that has low severity


Why am I receiving a high severity alert in my Panther Console for a detection that has been configured with low severity?


To troubleshoot, perform the following steps:

  1. Log in to your Panther Console and navigate to your Alerts.
  2. Locate the alert that you want to investigate and check for the Rule field that appears just under the name of the alert.
    • This will help you identify which rule has triggered each alert.
  3. Click on the Rule field in order to check the rule configuration. Look at the upper right of your screen and locate the severity of the rule. 



The most probable explanation for this behavior is that there are different detections configured in your Panther Console, each of them having a different severity, but with similar titles. 

  • Was this article helpful?