Question
Notes for Alerts or Incidents with Statuses other then "Closed" and "Resolved"
Hi Team,
We have the statuses for Alerts and Incidents. These are:
For Alerts: Open, Investigating, Pending, Closed, Re-opened
For Incidents: Open, Awaiting, Resolved, Inactive
We can only add the notes when Alert status is "Closed" or if the Incidents Status is "Resolved".
I just want to know if a note also can be added:
1- To the Alert when the Alert status is changed from Open to either Pending, Re-opened?
2- To the Incident when the Incident status is changed from Open to Avaiting or Inactive.
BR,
Burhan
#FortiSOAR #SOAR
