User Guide

• Overview
  • Logging on to FortiSOAR
  • User Profile
    • Authentication
    • 2-Factor
    • Notifications
    • Theme Settings
    • History
    • Audit Logs
  • Regenerating your password
  • Feature Tour
    • Working in FortiSOAR
    • Navigation
    • Searching
    • Viewing Settings and Executed Playbook Logs
    • Viewing Notifications and Pending Tasks
    • Adding Records
    • Editing
    • Modules & Models
    • Linking
    • Automation
    • Access Control
    • Live UI - Web Sockets
• Searches and Filters
  • Global Search
    • Keyword Search
    • Search Types and Search Results
    • Authorization
    • Searching Record Contents
  • List Search
    • Keyword Search
    • Filter Search
    • Search Results
  • FortiSOAR Search Errors
  • Filtering Records
    • Simple Filters
    • Advanced Filters
• Dashboards, Templates, and Widgets
  • Overview
    • Dashboards
    • Templates
    • Widgets
  • Using Dashboards
    • For Users
    • For Administrators
    • Process of creating or editing dashboards
    • Permissions required for modifying dashboards
    • Users: Working with dashboards
    • Administrators: Working with dashboards
  • Input Variables in Dashboards and Reports
    • Defining Input Variables
    • Configuring Input Variables
    • Using Input Variables
    • Related Records Filter in Widgets
  • Using Templates
    • Editing Templates
    • Template Types
  • Using Template Widgets
    • Structure
    • Charts and Metrics
    • Record - Card View
    • Record - Listing
    • Record Fields
    • Header Widgets
    • Related Record Listing
    • Utility Widgets
    • Custom Content
    • Widget Library
    • Common components within Widgets
    • Display Elements
    • Displaying "Text Area" fields in the JSON format
• Content Hub
  • Permissions required for using Content Hub
  • Content Hub
    • Discover tab
    • Manage tab
    • Create tab
    • Content Hub Portal
  • Troubleshooting Tips
    • Unable to see updates for your entities in Content Hub
• Solution Packs
  • Permissions required for using Solution Packs
  • Viewing Solution Packs in Content Hub
  • Working with Solution Packs
  • Creating Solution Packs
    • Launching a widget from the FortiSOAR UI
  • Editing an existing Solution Pack
• Widgets Library
  • Permissions required for using Widgets
  • Viewing Widgets
  • Working with Widgets
  • Editing an existing widget
  • Creating Widgets
    • Directory structure and contents for widgets
    • Using a widget in FortiSOAR pages
    • Adding a button that triggers a Manual Trigger or Reference Playbook in a widget
• Modules
  • Default Modules
    • Dashboard
    • Queue & Shift Management
    • Incident Response
    • Automation
    • Schedules
    • Resources
    • Reports
    • Widget Library
    • Content Hub
    • Help
  • Additional Modules
    • Vulnerability Management
    • Scenarios
• Working with Modules - Alerts & Incidents
  • Alerts
    • Alerts Dashboard
  • Incidents
    • Incidents Dashboard
  • Working with Alerts and Incidents
    • Alerts List View
    • Alert Details View
• Queue, Shift, and Leave Management
  • Permissions required for working with queues and shifts
  • Prerequisites to automating assignments
  • Creating Queues
    • Permissions required
    • Queue Management Settings
  • Working with Queues
  • Working with Shifts
    • Permissions required
    • Generating Shifts
    • Deleting Shifts in bulk
    • Initiating Shift Handovers
  • Managing Leaves
    • Permissions required
    • Adding Leaves
    • Editing, Exporting, Cloning, or Deleting Leaves
• Reports in FortiSOAR
  • Permissions required for working with reports
  • Working with reports
    • Adding or Editing Reports on the Library page
    • Performing operations on the Report Page
    • Input Variables in Dashboards and Reports
    • Displaying of timezone within exported reports
    • Scheduling Reports
    • Historical Reports
• War Rooms
  • Overview
  • Permissions required
  • Launching War Rooms
  • Setting up War Rooms
    • Dashboard
    • Workspace - Enabling Communication
    • Task Management
    • Investigate
    • Communication
    • Timeline
• Schedules
• Tutorial: Creating an Incident Form for the Phishing Type of Incident
  • Purpose
  • Adding required fields to the Incident of type "Phishing" using the Module Editor
  • Publishing the Incidents Module
  • Updating the System View Templates (SVTs)
    • Editing the Detail view of the Incidents Module
  • Conclusion
• Change Log