One of the options for receiving alerts after an incident on your infrastructure is an email alert. The FortiMonitor incident alert emails are divided into two different sections. The first identifies the affected instance. The second allows you to take action by either viewing the incident, acknowledging the incident, or escalating the incident to the next contacts on the alert timeline.

You can see the affected service, the group the instance belongs to, the severity, and when the incident started in the first part of the email. The Timeline section shows you when and where the incident originated.

Click View to jump into your account and see more incident information.

Once the incident has cleared, if you have enabled All Clear in the Alert Timeline for the instance, you will receive an email like the following.

You can see the actions taken, the time the incident resolved, and who was contacted according to the assigned Alert Timeline.

In situations with users who are contact only, none of the links will be active, they will only receive the alert. They will not see the options to View, Ack, Delay, or Escalate.