Skip to main content
Panther Knowledge Base

Why am I getting timestamp errors from PAT test?

QUESTION

Why am getting timestamp errors from PAT test? I bulk downloaded rules from the Panther Console and tried testing them through PAT.

ANSWER

Bulk downloading from the Panther Console could be a possible cause, because of a change in the YAML file upon exporting. A creationDate": "2019-01-00T00:00:00Z" wouldn't throw errors in YAML, but when running PAT test, the parser fails as it is then being read as JSON. The 00 day from the creationDate causes the issue and needs to be manually adjusted to bypass the error.