Editing incident sequence rules

To edit an incident sequence rule, follow these steps.

Changes made to a rule will not be applied to entities until the rule is published.

How to edit an incident sequence rule

1. In the FortiDLP Console, on the left-hand sidebar, click .
2. Select the Sequence rules tab.
3. Do one of the following:
   • To edit a rule's name and/or description:
     1. On the right-hand side of the row for the relevant rule, click> Edit name and description.
        
     2. Modify the rule name and description.
     3. Click Submit.
   • To edit a rule's operation mode:
     1. On the right-hand side of the row for the relevant rule, click> Edit sequence rule mode.
     2. In the Edit incident rule mode dialog box, select the new operation mode:
        • To disable the rule, select the Disabled radio button.
        • To enable the rule, select the Enabled radio button.
        • To test the rule, select the Test radio button.
          
     3. Click Save.
   • To edit a rule's configuration:
     1. Click the rule you want to modify.
     2. Update existing values, as detailed in Creating incident sequence rules. You can also add/remove stages by clicking Update stages at the top of the page, selecting/deselecting the corresponding checkboxes, and clicking Save.
4. Do one of the following:
   • To publish the rule now, click Publish and then click Publish again in the dialog box that displays.
   • To publish the rule later, exit the sequence rule page and see Publishing incident sequence rules for instructions when you are ready.