FortiSIEM: Missing Incident Title Issue

[abrar710]

Hello everyone,

I’m facing an issue in FortiSIEM for some incidents, where the 'Rule Name' and 'Event Type' are visible on 'Incident Details', but the Incident Title is not showing up. Interestingly, for other incidents the title appears as expected.

Has anyone else experienced this behavior, or is there a known fix/workaround?

[joseph012]

Hey mate, Sometimes the incident title doesn’t populate if the rule configuration is missing a display field. Try double-checking your rule settings or re-saving them. A quick refresh or sync usually helps too i hope it helps.

[aran]

Hello friend,
Have you tried checking the Incident Title under Action of Step 3 of rule creation?
It helped in my case.