QuestionQ11

Configure incidents and automation

An analyst needs to create a rule from a newly created Analytics search.

What is the fastest method?

  • A On the upper menu bar on any tab, click the pencil icon.
  • B On the Analytics tab, click the New button next to the Filter By box.
  • C On the Analytics tab, click Actions > Create Rule.
  • D Create a new rule under Resources > Rules and fill in the search details.
Explanation

FortiSIEM lets an analyst create a rule directly from a completed Analytics search by selecting Actions > Create Rule. This uses the existing search as the basis for the rule, making it faster than creating a rule manually under Resources > Rules.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!