FortiSIEM Incident Notification Policy Not Sending Emails

[ismailurek2]

Hello Fortinet Community,

We have configured an Incident Notification in FortiSIEM to send email alerts when incidents occur.

• Test emails (via the “Send Test Email” option) work correctly and are being received.

• However, when a real incident is triggered, no email is received.

• Email server settings are valid, as test emails are successfully sent.

The issue appears to be specific to incident-triggered email alerts.

We kindly request your assistance in identifying and resolving this issue.

Best Regards,

İsmail Ürek

FortiSIEM 

[AEK]

Hi Ismail

Which FSM version?

Can you share a screenshot of the notification policy?

[ismailurek2]

Hi @AEK ,

The FortiSIEM version is 7.2.5. I have also configured the definition through the Automation Policy. However, when I try to manually send an incident email from the Incident section, I get outputs like this and the email is not received.

[ismailurek2 · Accepted solution]

Hi,

It was understood that the problem was caused by entering a mail address that was not in the default email sender section. A mail associated with the email server must be entered.

Best Regards,

İsmail ÜREK