Report for Outbreak Detection handlers

[GerryE]

Hello,

we are using FortiAnalyzer together with the Outbreak Detection module. To make our work as easy as possible, we want to work with playbook

We know how to create a playbook for a handler and also for a report. The problem with the Outbreak Detection module, however, is the large number of handlers, each of which has its own report.

We want to save ourselves the work and do not want to create a separate playbook for each handler. So the question here is whether and how a playbook can be configured for all handlers?

FYI: We already know this community contribution, but it is no help to us.
https://community.fortinet.com/t5/Support-Forum/Custom-Playbook-to-notify-for-any-Outbreak-Alert-FAZ...

Thank you

[Stephen_G]

Hello,

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.

Thanks,

[Stephen_G]

Hello,

We are still looking for someone to help you.

We will come back to you ASAP.

[vraev]

Dear Customer,

The handler can have a many triggers but you can not use many handlers at once.

https://community.fortinet.com/t5/FortiAnalyzer/Technical-Tip-How-to-create-a-custom-playbook-using-...

Best,

[Stephen_G]

Hi GerryE,

From what our staff have told me, it sounds like this may be possible through the FortiAnalyzer API. You will need FNDN access to use it: https://fndn.fortinet.net/

This may help you: https://fndn.fortinet.net/index.php?/forums/forum/79-fortianalyzer-sample-sql-queries/

Hope that helps,