Panther
Panther is a modern SIEM that transforms terabytes of raw logs per day into a structured security data lake to power real-time detection, swift incident response, and thorough investigations.
Creating a Panther connection
Using API Token
To create the connection you need:
- An API Address
- An API Token
The API address attribute specifies the base API URL of your Panther deployment type.
-
For Cloud Connected and self-hosted deployments :
https://{YOUR_PANTHER_DOMAIN}/v1Note: should end with /v1.
-
For SaaS deployments :
https://api.{YOUR_PANTHER_DOMAIN}.runpanther.net
Important: Ensure that the URL does not include any specific base paths (e.g., /public/graphql).
For more information regarding the deployment types please refer to Panther’s documentation.
Obtaining the credentials
To obtain the API token, refer to the Panther documentation on creating API tokens.
Creating your connection
-
In the Blink platform, navigate to the Connections page > Add connection. A New Connection dialog box opens displaying icons of external service providers available.
-
Select the Panther icon. A dialog box with name of the connection and connection methods appear.
-
(Optional) Edit the name of the connection. At a later stage you cannot edit the name.
-
Select API Token as the method to create the connection.
-
Fill in the parameters:
- The API Address
- The API Token
-
(Optional) Click Test Connection to test it.
-
Click Create connection. The new connection appears on the Connections page.
Was this page helpful?