Technical Tip: How to customize incident email notification

mbenvenuti · ‎03-21-2025

Description

This document describes how to customize incident email notifications.

Scope

FortiSIEM.

Solution

When FortiSIEM sends incident notifications through email, it's using a default template. But it's possible to create customized templates by following the next steps:

Download the test.html file and open it with an HTML text editor.

Go to the FortiSIEM GUI at Admin -> Settings-> Email
Create a new template:
- Type template name.
- Choose Scope.
- Tick the HTML tag.
- Check attributes content available in 'Insert content'.
- Insert email subject using 'Insert content'.

Edit the content under the tag <body> of the HTML file.
Use basic HTML tags and attributes from 'Insert content'
Save the html file.
Open the saved html file with a web browser to see the result.
Copy what is between the 2 <body> </body> tags from the html file.
Paste it in 'Email Body:" from the FortiSIEM Email template menu.
Preview and Save it
Go to the Incident page and select an incident, select Action-> Notify via Email.
Type an email address select the template just created and select 'send'.
Go to the mailbox to see the final result.

Technical Tip: How to customize incident email notification

You are leaving our website