Incidents

Incidents can be created to track and analyze events.

Incidents raised from the Event Monitor contain event details, as well as information and actions helpful for administrator analysis. From the incident's analysis page, administrators can assign incidents, view audit history, and manage attached reports, events, and comments.

For more information on incidents, see the following topics:

• Raising an incident
• Analyzing an incident
• Configuring incident settings
• Adding reports to an incident

Incidents can be viewed at FortiSoC/Incidents & Events > Incidents.

To configure incident settings, go to FortiSoC/Incidents & Events > Incidents, and click Settings.