Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
adem_netsys
Contributor

Rule Issue

Hello guys,

 

We have one default rule and when I run it, I can see the audit logs run, but it does not fall as an incident. What could be the reason for this?

 

Ekran görüntüsü 2023-12-15 170517.png

4 REPLIES 4
anignan
Staff
Staff

Hi @adem_netsys ,

 

It should generate an incident based on your Action.. Can you check if you have the correct time range filter in the incident dashboard?

 

Abdel

adem_netsys

Hi,

Yes, i have correct time range but i couldnt understand why. I have not found this error in a different version.

anignan
Staff
Staff

Hi @adem_netsys ,

Do you have at least some incidents generated by default rules? What is FSM version?

 

adem_netsys

In 7.0.2 environment we get this problem. In the latest version the same rule successfully generates the incident.

Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors