Critical (Last File Received 1646min ago is more than 20min) How long to wait on these alerts

[KarlH]

Hello

a far more general question

As I hone my expertise in this tool,  what is the  threshold for how long it has been since a file is received?

Do I wait a certain time?  what are others doing to handle general critical states that can show up in the health column as it goes red? I often times see these red alerts then go greenafter a time, but what is a safe time to wait, once they hit these threshold?

Thanks in advance,

Karl.

[Stephen_G · Accepted solution]

Hello,

Thank you for using the Community Forum. I have moved this to the FortiSIEM Discussions board, where you are more likely to receive a reply.

Thanks,