Resetting predefined event handlers to factory defaults

You can change some settings in predefined event handlers as needed. If required, you can restore those predefined event handlers to their factory default settings.

The Factory Reset option is only available for predefined event handlers that have been changed.

To reset predefined event handlers:

1. Go to FortiSoC/Incidents & Events > Handlers > Event Handler List.

   If resetting a predefined correlation handler, go to FortiSoC/Incidents & Events > Handlers > Correlation Handler List.

2. In the More menu, select Show Predefined.
3. Select one or more predefined event handlers and click More > Factory Reset.

   You can also right-click the event handler and select Factory Reset.

   If the predefined event handler has not been changed from the factory default settings, this option will be grayed-out.