Hello,
Ask about the Incident Status:- Active, Manaually Cleared, Automatically cleared, and System cleared.
the System cleared and the Auto cleared is performed by the system itself no interaction from the user side.
How can i use them efficiently?
Hello Ali,
I am sorry, but I don't understand your question here.
You can only clear manually, so the auto-clear (ML or clear-condition cleared it) and system-clear (one day after incident happened) is just something to get you better understanding about the reason for clearing. So what do you have in mind for using them "efficiently"?
Best,
Christian
Ali might be saying that incidents are automatically clearing even without a rule definition defined. If so, we're seeing something similar.
User | Count |
---|---|
28 | |
15 | |
5 | |
4 | |
2 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.