Removing events and detections from cases

If needed, you can remove an unwanted event or detection from a case. Removing an event or detection from a case will also remove all associated operator comments.

How to remove an event/detection from a case

1. In the FortiDLP Console, on the left-hand sidebar, click .
2. In either the Open cases or the By Fortinet Cyber Analysts panel, click the relevant case.
3. In the Events table, on the row of the event/detection you want to remove, click> Remove event from case.