Skip to main content
GerryE
New Member
November 6, 2024
Question

Report for Outbreak Detection handlers

  • November 6, 2024
  • 4 replies
  • 1243 views

Hello,

we are using FortiAnalyzer together with the Outbreak Detection module. To make our work as easy as possible, we want to work with playbook

 

We know how to create a playbook for a handler and also for a report. The problem with the Outbreak Detection module, however, is the large number of handlers, each of which has its own report.

 

We want to save ourselves the work and do not want to create a separate playbook for each handler. So the question here is whether and how a playbook can be configured for all handlers?

 

FYI: We already know this community contribution, but it is no help to us.
https://community.fortinet.com/t5/Support-Forum/Custom-Playbook-to-notify-for-any-Outbreak-Alert-FAZ/td-p/289890

 

Thank you

4 replies

Stephen_G
Staff & Editor
Staff & Editor
November 11, 2024

Hello,

 

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.

 

Thanks,

Stephen_G - Fortinet Community Team
Stephen_G
Staff & Editor
Staff & Editor
November 12, 2024

Hello,

 

We are still looking for someone to help you.

We will come back to you ASAP.

Stephen_G - Fortinet Community Team
vraev
Staff
Staff
November 12, 2024

Dear Customer,

 

The handler can have a many triggers but you can not use many handlers at once.

https://community.fortinet.com/t5/FortiAnalyzer/Technical-Tip-How-to-create-a-custom-playbook-using-an-event/ta-p/253090

Best,

Stephen_G
Staff & Editor
Staff & Editor
November 12, 2024

Hi GerryE,

 

From what our staff have told me, it sounds like this may be possible through the FortiAnalyzer API. You will need FNDN access to use it: https://fndn.fortinet.net/

 

This may help you: https://fndn.fortinet.net/index.php?/forums/forum/79-fortianalyzer-sample-sql-queries/

 

Hope that helps,

Stephen_G - Fortinet Community Team
Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!