Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
adem_netsys
Contributor

Rule Issue

Hello guys,

 

We have one default rule and when I run it, I can see the audit logs run, but it does not fall as an incident. What could be the reason for this?

 

Ekran görüntüsü 2023-12-15 170517.png

4 REPLIES 4
anignan
Staff
Staff

Hi @adem_netsys ,

 

It should generate an incident based on your Action.. Can you check if you have the correct time range filter in the incident dashboard?

 

Abdel

adem_netsys

Hi,

Yes, i have correct time range but i couldnt understand why. I have not found this error in a different version.

anignan
Staff
Staff

Hi @adem_netsys ,

Do you have at least some incidents generated by default rules? What is FSM version?

 

adem_netsys

In 7.0.2 environment we get this problem. In the latest version the same rule successfully generates the incident.

Labels
Top Kudoed Authors