On the supervisor, Incidents displays all incidents created on FortiAnalyzer Fabric members.
Incidents contain event details, as well as information helpful for administrator analysis. From the incident's analysis page, administrators can view incidents, audit history, and attached reports, events, and comments.
Incident information syncs from members to the supervisor. New incidents can only be raised on FortiAnalyzer Fabric members.
Double-click on an incident to view the incident analysis page. The incident analysis page indicates the FortiAnalyzer and ADOM that the incident was created on. For more information on the options available to SOC analysists, see the FortiAnalyzer Administration Guide.