Issue

When attempting to disable a detection in the Panther Console, the following error message appears:

The required fields must be filled before saving: tests.

This error occurs even when the detection has multiple unit tests defined.

Resolution

To resolve this issue:

  1. Review your unit tests for the detection.

  2. Check if two or more unit tests have identical names.

  3. If duplicate test names are found, rename the tests to ensure each has a unique name.

  4. After renaming, try disabling the detection again.

Cause

This error occurs when there are multiple unit tests with the same name within a single detection. Panther requires each unit test to have a unique name to properly validate and save the detection configuration.