Incidents

Incidents can be created to track and analyze events.

Incidents raised from Event Monitor contain event details, as well as information and actions helpful for administrator analysis. From the incident's analysis page, administrators can assign incidents, view audit history, and manage attached reports, events, and comments.

For more information on incidents, see the following topics:

• Raising an incident
• Analyzing an incident
• Configuring incident settings
• Adding reports to an incident

Incidents can be viewed at Incidents & Events/FortiSoC > Incidents.

To configure incident settings, go to Incidents & Events/FortiSoC > Incidents, and click Settings.