Skip to main content
mbenvenuti
Staff
Staff
March 21, 2025

Technical Tip: How to customize incident email notification

  • March 21, 2025
  • 0 replies
  • 933 views

 

Description This document describes how to customize incident email notifications.
Scope FortiSIEM.
Solution

When FortiSIEM sends incident notifications through email, it's using a default template. But it's possible to create customized templates by following the next steps:

 

  1. Download the test.html file and open it with an HTML text editor.

 

vscode.png

 

  1. Go to the FortiSIEM GUI at Admin -> Settings-> Email
  2. Create a new template:
    • Type template name.
    • Choose Scope.
    • Tick the HTML tag.
    • Check attributes content available in 'Insert content'.
    • Insert email subject using 'Insert content'.

 

email_menu.png

 

  1. Edit the content under the tag <body> of the HTML file.
  2. Use basic HTML tags and attributes from 'Insert content'
  3. Save the html file.
  4. Open the saved html file with a web browser to see the result.
  5. Copy what is between the 2 <body> </body> tags from the html file.
  6. Paste it in 'Email Body:" from the FortiSIEM Email template menu.
  7. Preview and Save it
  8. Go to the Incident page and select an incident, select Action-> Notify via Email.
  9. Type an email address select the template just created and select 'send'.
  10. Go to the mailbox to see the final result.

 

email.png