# Panther

## Prerequisites <a href="#prerequisites" id="prerequisites"></a>

Before configuring in the Fusion portal, the http source webhook and shared secret authentication method must be setup in Panther. For more details, follow the [HTTP log source setup](https://docs.panther.com/data-onboarding/data-transports/http#how-to-set-up-an-http-log-source-in-panther) instructions from Panther.

## Netography Portal Steps <a href="#netography-portal-steps" id="netography-portal-steps"></a>

In **Settings > Response Integrations**, click **Add Integration**. Select **Panther**.

![](/files/3eqNgx2cANs4EYCYoeQp)

## Configuration details <a href="#configuration-details" id="configuration-details"></a>

The following fields are specific to the Panther integration.

| Field                   | Required | Description                                                                                                                                                                                        | Example                                       |
| ----------------------- | -------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------- |
| `URL`                   | yes      | The Panther http source webhook URL configured from the HTTP log source setup                                                                                                                      | `https://name.panther.runpanther.net/example` |
| `Skip SSL Verification` | no       | If checked, the server certificate will not be validated against the available certificate authorities. Also won’t require the URL host name to match the common name presented by the certificate |                                               |
| `Headers`               | yes      | Comma separated list of `header: value` pairs. This will be the shared secret value configured from the HTTP log source setup.                                                                     | `header: shared-secret`                       |

{% hint style="info" %}
**📘After your configuration is submitted, the Panther integration will be treated as a standard webhook integration in the Fusion portal.**
{% endhint %}

## Authentication details <a href="#authentication-details" id="authentication-details"></a>

The following fields may be used for the integration to authenticate using HTTP Basic Auth.

| Field      | Required | Description              |
| ---------- | -------- | ------------------------ |
| `Username` | no       | HTTP Basic Auth ID       |
| `Password` | no       | HTTP Basic Auth password |

### Additional post configuration <a href="#additional-post-configuration" id="additional-post-configuration"></a>

After the Panther configuration is setup, you will need to configure a Response Policy in the Fusion portal and a custom log schema in Panther to send events from Fusion.

#### Configure a Response Policy to Sent Events to Panther <a href="#configure-a-response-policy-to-sent-events-to-panther" id="configure-a-response-policy-to-sent-events-to-panther"></a>

You can configure response policies in the portal by navigating to **Response -> Response Policies -> Add Response Policy**.

#### Configure Panther Custom Log Schema <a href="#configure-panther-custom-log-schema" id="configure-panther-custom-log-schema"></a>

To configure the custom log schema from the Panther console, follow the [custom log types](https://docs.panther.com/data-onboarding/custom-log-types) guide in Panther and then navigate to the "Infer schema from sample logs" box or click Select file and choose the log file(s) or paste in the Panther console. Use `JSON` as the Logs Stream Type.

To get logs from the Fusion Portal to use for the Panther custom log types, go to **Search -> Events**, select an event. view the **raw record** from the properties tray, select the **JSON** tab, and click the top level clipboard icon as shown below:

![](/files/NIuBHlZB3WVtfn8AymzN)


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.fusion.vectra.ai/automate-responses/configuring-response-integrations/panther.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.