QUESTION

How do I verify that my Panther webhook endpoint (SharedSecret) is correctly configured to receive logs?

ANSWER

To verify your Panther webhook endpoint is working correctly, you can test it using a curl command in your terminal:

• Replace <header-name> with the header name you have inserted during configuration

• Replace <secret> with the shared secret value you have inserted during configuration

• Copy the URL directly from your Panther Console

curl --data '{ "hello": "world" }' \
    -H "<header-name>: <secret>" \
    <URL>

If you no longer have the header and secret values saved, you can edit them in your log source configuration. Please note that it may take up to 10 minutes before you see the log event received and ingested.