I received a "Validation failed" error when running Panther’s PAT validate command. How can I troubleshoot this?
Last updated: September 25, 2024
QUESTION
When executing the panther_analysis_tool validate command, I encountered a Validation failed error in the output. How can I troubleshoot this issue?
ANSWER
To troubleshoot this:
Ensure you're using the most recent version of
panther_analysis_tool.Verify that your API token has the required Panther permissions to execute this command. For the validate command, you need either
Bulk Upload ValidateorBulk Upload.Check that your
--api-tokenand--api-hostconfigurations are up-to-date.Try generating a new Panther API token and see if that resolves the issue. You can test the new token using our API Playground.
Make sure you've synced to the latest version of panther-analysis.
Run the command with the
--debugflag:pat --debug validateto view the raw response for additional context to the error you're encountering. Be aware, this will produce verbose output. Alternatively, you can runpipenv run pat --debug validate > output.txt 2>&1to pipe the output to a text file.
If you're still encountering issues after trying these troubleshooting steps, please contact the Panther support team and provide them with the following information:
The full command you're attempting to execute.
The complete output, including any error messages.
The raw response or text file generated from using the debug flag.