Issue

When setting up Auth0 log streaming to Panther, users may encounter connectivity issues if the Αuthentication Τoken is not configured correctly. This can prevent logs from being successfully streamed from Auth0 to Panther.

Resolution

To properly configure Auth0 log streaming to Panther:

• In the Authentication Token field in the Auth0 Log Stream, include the word "Bearer" followed by a space and then the token value: Bearer TOKEN_VALUE. Based on step 2, substep 7 from our docs regarding the authentication method, the field value should always include the word Bearer with a space before the token value generated by Panther: Bearer <token value>. 

Cause

This issue commonly occurs due to the "Bearer " prefix being missing in the authentication token, which prevents proper authentication, even if the token value itself is correct.