How do I resolve the alert error "module 'Panther' not found"?
Issue
I added some log sources and rule packs, and now I'm getting a lot of errors spamming my alerts channel, like this:
module 'panther' not found
Resolution
To resolve this issue from the Panther Console:
- In the left-hand side of the Panther Console, click Build > Helpers, and search for an option called 'panther'.
- You may see other helpers with other words after 'panther', such as 'panther_base_helpers'.
- Go back to Build > Helpers and click Create New in the upper right corner.
- Use the exact name
panther
and copy the contents of this file into the Helper Definition field. - If you're keeping a
panther-analysis
repo, make sure this file exists under global_helpers.
Cause
This issue can be caused by missing the 'panther' helper.