I am getting getting "502 Bad Gateway" at my API host when enabling CI/CD in GitHub Actions. It seems the request is getting completed and updates are applied, but timing out before the response is complete.
The payload might be too large for Panther to process within the allotted time span. You can follow the steps below to amend this:
Confirm that you are using the most recent version of PAT
Try uploading the entire rules folder while also passing --batch
to the command. You can find more details about it in this section of our documentation.
If the error message persists, try batching your import by detection type (policies, rules, scheduled rules, etc.). For example, you can try running panther_analysis_tool upload --filter AnalysisType=rule
and then panther_analysis_tool upload --filter AnalysisType=policy,global,scheduled_query,scheduled_rule,lookup_table,datamodel
to reduce the payload.
This often occurs because the payload is too large to process within the allotted time span.