FortiSoar Alert Levet

[adem_netsys]

How can we lower or raise the alert level in FortiSoar? For example, setting the high level alert to medium level.

[anarula]

I assume your question is how to change alert level (aka Severity) from Playbook. If that's not the case, please elaborate on your ask.

You can modify severity (or for that matter any field in alert) using Update Record step in the playbook. Specify the IRI of the alert (the @ID field) and set the severity to desired value using visual select. Similarly you can set any other field.

[adem_netsys]

Thank you for your return, can you show this statement visually? :)

[anarula]

also attaching the playbook for you (extrac json from zip and import it in your playbook collection)

[adem_netsys]

You have been very helpful. Finally, can't we trigger this by typing id into record id, should we choose alert here again?

[anarula]

Can you elaborate on your use case again? particularly who would trigger this playbook? (someone by clicking a button, or invoked as reference/subplaybook from another playbook, or scheduled) ..