Open Ticket
The Open Ticket option enables you to send events to an event-management tool such as Jira or ServiceNow. Open Ticket automatically opens a ticket and attaches the relevant event to a ticket.
In order for the Open Ticket feature to work properly, you must set up an email feed in the event-management tool to be used.
|
Most event-management tools are supported. FortiEDR has tested and verified that Open Ticket works with the ServiceNow and Jira systems. For more details about setting up the email feed required for this feature, see Appendix A – Setting up an email feed for open ticket. |
|
|
Security events are only sent to a ticketing system when they occur on devices that are part of Collector Groups that are assigned to a Playbook policy in which the Open Ticket option is checked. |
To configure Open Ticket settings:
- In the Open Ticket area, in the System name field, enter the system name for the tool to be used for event management. This is a free-text field.
- In the Email address field, enter the email address that is the destination to which all tickets are to be sent from FortiEDR. All tickets from all organizations are sent to this email.
- Click Save.