Connecting Panther

After this article...

You'll be able to send your Activity Log data to your Panther tenant to monitor key access and security-related events as soon as they happen.

Required plan & roles

There's no minimum plan required to connect Lumos to Panther.

Instructions

In Panther

1. Follow Panther's documentation to create an HTTP source. It's recommended that you use a bearer token for authentication.

2. After you've completed this step, make note of the URL that Panther provides you.

In Lumos

1. Configure a SIEM webhook using the URL and bearer token created by Panther. See📄 Creating Webhooks

2. Set your webhook as your SIEM connection in Lumos by following these steps:📄 SIEM Webhooks

Verifying the connection

Once you configure the SIEM connection in Lumos, events from your Lumos Activity Log should start being shipped to Panther automatically!