Fortinet white logo
Fortinet white logo

Administration Guide

Incidents

Incidents

The Analytics > Incidents & Events > Incidents page displays all incidents created to track and analyze events.

Charts at the top of the page display:

Chart

Description

Severity

Displays the total number of incidents and the number of incidents for each severity:

  • Low

  • Medium

  • High

  • Critical

Click the chart to filter the page. Click the Filter icon beside Severity to remove the filter.

Status

Displays the total number of incidents and the number of incidents for each status:

  • Analysis

  • Response

  • Closed (Remediated)

  • Closed (False Positive)

  • Not Assigned

Click the chart to filter the page. Click the Filter icon beside Status to remove the filter.

Category

Displays the total number of incidents and the number of incidents per category:

  • Unauthorized Access

  • Denial of Service

  • Malicious Code

  • Improper Usage

  • Scans/Probes/Attempted Access

  • Uncategorized

Click the chart to filter the page. Click the Filter icon beside Category to remove the filter.

Hover the mouse over a column heading to display:

  • Configure Table icon: Click to choose which columns to display in the table.

  • Filter icon: Click to access filter options for the column. May not be available for all columns.

To view incident analysis:
  1. Go to Analytics > Incidents & Events > Incidents.

  2. Select an incident and click Analysis.

    A summary of the incident is displayed as well as the associated event(s).

  3. When done, click Back.

To edit an incident:
  1. Go to Analytics > Incidents & Events > Incidents.

  2. Select an incident and click Edit.

  3. Edit the following options, and click OK:

    • Name

    • Incident Category

    • Severity

    • Status

    • Description

    • Assigned To

Incidents

Incidents

The Analytics > Incidents & Events > Incidents page displays all incidents created to track and analyze events.

Charts at the top of the page display:

Chart

Description

Severity

Displays the total number of incidents and the number of incidents for each severity:

  • Low

  • Medium

  • High

  • Critical

Click the chart to filter the page. Click the Filter icon beside Severity to remove the filter.

Status

Displays the total number of incidents and the number of incidents for each status:

  • Analysis

  • Response

  • Closed (Remediated)

  • Closed (False Positive)

  • Not Assigned

Click the chart to filter the page. Click the Filter icon beside Status to remove the filter.

Category

Displays the total number of incidents and the number of incidents per category:

  • Unauthorized Access

  • Denial of Service

  • Malicious Code

  • Improper Usage

  • Scans/Probes/Attempted Access

  • Uncategorized

Click the chart to filter the page. Click the Filter icon beside Category to remove the filter.

Hover the mouse over a column heading to display:

  • Configure Table icon: Click to choose which columns to display in the table.

  • Filter icon: Click to access filter options for the column. May not be available for all columns.

To view incident analysis:
  1. Go to Analytics > Incidents & Events > Incidents.

  2. Select an incident and click Analysis.

    A summary of the incident is displayed as well as the associated event(s).

  3. When done, click Back.

To edit an incident:
  1. Go to Analytics > Incidents & Events > Incidents.

  2. Select an incident and click Edit.

  3. Edit the following options, and click OK:

    • Name

    • Incident Category

    • Severity

    • Status

    • Description

    • Assigned To