Viewing alert details

In the SOCaaS Portal you can review alert details and correlations, comment and communicate with Fortinet SOC team, and update the status of the alert. To view the alert details, go to Alerts and click the alert to open it.

The alerts details page displays information such as the Severity, Type, and Status for the selected alert.

To share the alert URL with a member of your team, click Copy Link to save the URL to your clipboard.

With a FortiClient Forensic Services license, you can submit a forensic analysis request for alerts with endpoints with FortiClient managed by the onboarded FortiClient EMS. See Request forensic analysis.

The alert details page also includes the correlations for the selected alert. See Alert correlations.

This section includes information on the following:

• Alert correlations

• Alert escalation

• Alert status and closure

• Alert comments