Events can be assigned to administrators.
To view the administrator assigned to an event, enable the Assigned To column in the table from the column settings option in the toolbar. The Assigned To column displays the username of the administrator assigned to the event.
To assign an event:
- Go to FortiSoC/Incidents & Events > Event Monitor and select a dashboard.
- Right-click on an event, and click Assign To.
The Assign to User dialog appears.
- Select a user from the dropdown or select Assign to myself, and click Save.
When enabled, the Assigned To column displays the username of the administrator assigned to the event.