Enabling event handlers

For both predefined and custom event handlers, you must enable the event handler to generate events. The Event Handler List and Correlation Handler List displays an icon to indicate which event handlers are enabled. The icon indicates enabled event handlers and the icon indicates disabled event handlers.

To enable event handlers:

1. Go to FortiSoC/Incidents & Events > Handlers > Event Handler List.

   If enabling a correlation handler, go to FortiSoC/Incidents & Events > Handlers > Correlation Handler List.

2. Select one or more event handlers and click More > Enable.

   You can also right-click the event handler and select Enable.