FortiSIEM: Ideas for workflow for custom ticket system?

[Secusaurus]

Hi everyone,

As the FortiSIEM  case view is not fitted very well for our (MSSP) team communication, knowledge base or even monitoring what's to be done right now, we need to move on to our custom ticket system

I think that not very much people really work with "cases", but how did you solve it?

- Just buy/already have one of the out-of-box integrated systems or FortiSOAR?

- Push all incidents (via notification policy) to an external system and ignore FSM's incident view as well?

- Use a remediation policy (as you can write your custom scripts) as a querky workaround?

- Have your own add-in (which I am currently trying to research on)?

Would love to hear your thoughts.

Also, would be interesting if we should go in the direction of Feature Request for this one...

Best,

Christian

[FSM_FTNT]

FortiSOAR is certainly something I would advise looking into.

Christian, thanks for the direct feedback that you have provided on the FortiSIEM Case management it has been taken under consideration.