QuestionQ53Verified/Incidents, notifications, and remediationCopy linkReport a problemAsk AstroTutorSave questionWhat are the four incident-status options in FortiSIEM?AActive, cleared, false negative, false positiveBActive, auto cleared, cleared manually, system clearedCActive, auto closed, closed manually, system closedDActive, closed, cleared, resolvedShow AnswerAnswerExplanationFortiSIEM incident statuses include Active, Auto Cleared, Manually Cleared, and System Cleared. False positive is an incident-resolution value rather than an incident-status value.Learn moreFortiSIEM 7.5.1 User Guide — List ViewShow comments0Show commentsCommunity DiscussionNo comments yet. Be the first to start the discussion!
Community Discussion