Tor enrichment provider in Panther failing with the error message "Healthcheck Failed"

Last updated
Save as PDF

Issue

The tor_exit_nodes enrichment provider in the Panther Console is failing with the error message Healthcheck Failed' ("validation failed with 1 problems")

Resolution

CI/CD workflow

If your main workflow is CI/CD, then you can use the following steps to troubleshoot this issue:

In the Panther Console, go to Configuration > Enrichment Providers.
In the list, find the Tor Exit Nodes Lookup Table, and delete it.
- Note: You may need to wait about 10 minutes to ensure that it is fully deleted.
Re-upload the Lookup Table in your CI/CD pipeline to recreate it.

Packs workflow

In the Panther Console, go to Configuration > Enrichment Providers.
In the list, find the Tor Exit Nodes Lookup Table, and delete it.
Disable the Tor Lookup Tables Pack.
- Note: You may need to wait about 10 minutes to ensure that these changes have gone into effect.
Enable the Tor Lookup Tables Pack.
Enable the tor_exit_nodes Lookup Table, if it isn’t already.

Cause

This error might indicate that there is an issue with the Tor Exit Node Lookup Table that is causing the Lookup Table to fail to update.