Why do I see a “ratelimited” error while onboarding Slack logs to Panther?

Last updated: September 3, 2024

Issue

After I click Grant Access in Panther’s onboarding wizard while onboarding Slack audit logs, the following error appears:

Something went wrong when authorizing Panther monitoring.

Try going back to Panther monitoring and authorizing again. If problems persist, contact support for help.

Error details: ratelimited

Resolution

To resolve:

  1. In Slack, select the app you created for Panther monitoring.

  2. Go to Settings > Manage Distribution.

  3. Make sure that you have activated Public Distribution.

Cause

This error can occur if you do not activate Public Distribution for your Slack App.