How to Receive Instant Email Alerts for Intrusion Prevention Logs on FortiAnalyzer?

Hi,

Follow this article,

https://community.fortinet.com/t5/FortiAnalyzer/Technical-Tip-How-to-configure-email-alerts-for-configuration/ta-p/194727

Best Regards.

@Khaleelthe555 
You can create a custom event handler set log type to Event and subtype to IPS. Under Log Filters you set for example severity level high. And then created notification profile to send emails.

You can also check our the default "Default-NOC-Security-Events" event handler. 

Refer:
https://docs.fortinet.com/document/fortianalyzer/7.6.6/administration-guide/348606/creating-a-custom-event-handler
https://docs.fortinet.com/document/fortianalyzer/7.6.6/administration-guide/285829/creating-notification-profiles