Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
ac1
Contributor II

FAZ - FortiSoC - Handlers

Hi all,

How can i generate alerts only for events that have "allow" or "pass" action?

 

I tried to apply pre-filters excluding this type of action but they don't seem to work, we continually receive blocked traffic alerts that are not useful to us.

 

Thanks

 

ac1

2 REPLIES 2
Anthony_E
Community Manager
Community Manager

Hello ac1,

 

Thank you for using the Community Forum.

I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.

 

Regards,

Anthony-Fortinet Community Team.
Anthony_E
Community Manager
Community Manager

Hello,

 

I have found this document:

 

https://fortianalyzer4.rssing.com/chan-67445925/all_p3.html

 

Could you please tell me if it answering your question?

 

Regards,

Anthony-Fortinet Community Team.
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors