Rule Issue

Hello guys,

We have one default rule and when I run it, I can see the audit logs run, but it does not fall as an incident. What could be the reason for this?

Ekran görüntüsü 2023-12-15 170517.png

Staff

Hi @adem_netsys ,

It should generate an incident based on your Action.. Can you check if you have the correct time range filter in the incident dashboard?

Abdel

Explorer III

Hi,

Yes, i have correct time range but i couldnt understand why. I have not found this error in a different version.

Staff

Hi @adem_netsys ,

Do you have at least some incidents generated by default rules? What is FSM version?

Explorer III

In 7.0.2 environment we get this problem. In the latest version the same rule successfully generates the incident.

Sign up