QuestionQ18

Perform searches and investigations

How can the configuration management database (CMDB) be queried in an analytics search?

  • A Click Value > Select from CMDB.
  • B On the CMDB tab, select an entry, and then click Create Search.
  • C On the Admin tab, click CMDB Search.
  • D Click Attribute > Select from CMDB.
Explanation

FortiSIEM Analytics queries CMDB-backed objects by selecting Select from CMDB from the filter’s Value field. This supplies the CMDB device or group value for the selected search attribute and operator.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!