Skip to main content
Panther Knowledge Base

Missing data when ingesting data into the webhook HTTP endpoint in Panther

Issue

When trying to ingest test data using an HTTP/webhook log source, I can't find it in the data lake despite my Event Classification chart showing that data was ingested.

Resolution

To troubleshoot this issue, try the following:

  • Inspect the data being ingested. Ensure it is in JSON format and matches a schema attached to your log source.
  • Validate the spelling for your HTTP source URL where data is originating.

If these steps do not resolve your issue, please reach out to Panther Support for further troubleshooting.

Cause

This is a known bug that occurs when data is ingested that is not in JSON format, (required for the current version of the HTTP endpoint, see the HTTP source documentation for stream type requirements) or when the HTTP source URL is incorrectly formatted when routing incoming data. In these cases, data will be dropped silently.