When trying to ingest test data using an HTTP/webhook log source, I can't find it in the data lake despite my Event Classification chart showing that data was ingested.
To troubleshoot this issue, try the following:
- Inspect the data being ingested. Ensure it is in JSON format and matches a schema attached to your log source.
- Validate the spelling for your HTTP source URL where data is originating.
If these steps do not resolve your issue, please reach out to Panther Support for further troubleshooting.
This is a known bug that occurs when data is ingested that is not in JSON format, (required for the current version of the HTTP endpoint, see the HTTP source documentation for stream type requirements) or when the HTTP source URL is incorrectly formatted when routing incoming data. In these cases, data will be dropped silently.