NSE5-FAZ-7-2: Fortinet NSE 5 - FortiAnalyzer 7.2 AnalystDemo

Question

What is the purpose of using pre-filters while configuring event handlers?

A They limit which logs are checked for matches by the other filters.
B They can filter the logs before they are processed by FortiAnalyzer.
C They download new filters to be used in event handlers.
D They are common filters applied simultaneously to all event handlers.

Explanation

Pre-filters run before every regular filter in an event handler, limiting the logs evaluated for matches by those regular filters and eliminating the need to repeat the same criteria in each one.

Learn more

FortiAnalyzer Administration Guide: Adding pre-filters to event handlers

NSE5-FAZ-7-2: Fortinet NSE 5 - FortiAnalyzer 7.2 AnalystDemo

AstroTutor

Notes

Readiness

QuestionQ15

Community Discussion