Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
DChaffins
New Contributor

Can I do this through a play book?

Can a playbook be set up to scan for configuration changes that happen during a given set of hours?

I'm struggling to see how to set it up. I know these come through as:

Event Message: Configuration changed(Configuration is changed in the admin session)
Event Severity: alert
Event Sub Type: system

Event Type: event

 

I'm just not seeing how to get that granuarity into the playbook. Is there another way to approach getting notifications if logs are changed overnight?

2 REPLIES 2
Anthony_E
Community Manager
Community Manager

Hello DChaffins,

 

Thank you for using the Community Forum.

I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.

 

Regards,

Anthony-Fortinet Community Team.
Anthony_E
Community Manager
Community Manager

Hello DChaffins,

 

We are still looking for an answer to your question.

We will come back to you as soon as we get one.

 

Regards,

Anthony-Fortinet Community Team.
Labels
Top Kudoed Authors