QuestionQ45

VerifiedIncidents, notifications, and remediation

Refer to the exhibit.

Question Image

What would cause the two entries displayed in the incident action history?

Explanation

A system-cleared incident generates an email-history entry when its FortiSIEM automation policy is configured with the Send Email/SMS/Webhook to the target users action and system-clear notifications are not suppressed. The action history therefore records both the system clear and the email notification sent to the policy’s target recipient.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!