Why am I getting this error: "ConnectionString invalid, failed to satisfy the condition: azureEventHubConnectionString", when trying to set up Azure Event Hub log source in Panther?

Last updated: October 28, 2025

Issue

When attempting to add an Azure Event Hub log source in Panther, I received this error: Something didn't go as planned. ConnectionString invalid, failed to satisfy the condition: azureEventHubConnectionString. How do I resolve this?

Resolution

To resolve this issue, please make sure you're following the steps noted in our documentation:

  1. Navigate to your Azure Event Hub namespace.

  2. Select the specific Event Hub instance (not just the namespace).

    image.png

  3. Continue the setup by following Step 4 - 8 in our documentation.

Cause

This issue occurs when you try to use the connection string from the Event Hub namespace, instead of from a specific Event Hub instance. The connection string must be obtained from the actual Event Hub rather than the namespace level to properly establish the connection.