FortiSIEM
FortiSIEM provides Security Information and Event Management (SIEM) and User and Entity Behavior Analytics (UEBA)
Andy_G
Staff
Staff
Article Id 189526

Description

Summary of Topic

This article will demonstrate how to create email notifications

 

Steps

To create Email notifications we will need to perform the following:

  • Log into your AO-VA GUI
  • Click on Analytics > Incident Notification Policy
agodwin_FD39391_tn_FD39391-1.jpg
  • On the right panel you will see the notification policy - click on new:
agodwin_FD39391_tn_FD39391-2.jpg
  • In this window you will be able to customize if you want to:
    • Enable the policy
    • What Severity you would like to be notified at (Default: Low, Med, High)
    • What rules you would like to have trigger this notification (Default: Any)
    • During what time you would like to have this notification apply (Default: Any)
    • The affected devices you would like to be notified for (Default: Any)
    • The affected organizations you would like to be notified for (Default: Any)
    • What type of action to take
      • We will be discussing the email notification at this point:
  • To setup email, click on the dialogue box on the right of the last table in the window (This will be highlighted in red)
agodwin_FD39391_tn_FD39391-3.jpg
  • A notification actions window will pop up and you will be able to add users and or add an email address
agodwin_FD39391_tn_FD39391-4.jpg
  • To add a set of users
    • Highlight the set of users under the column "folders" and click on the "Folders >>" button
  • To add individual users
    • Highlight the set of users under the column "folders"
    • Click on the individual user name under "items" colum
    • Click on "Items >>" button
  • To add an individual email address (easiest method)
    • Click on "Add" under Email Addr
    • You can fill in an email address or multiple addresses with a comma (,) or a semi-colon (;) as a delimiter
agodwin_FD39391_tn_FD39391-5.jpg
  • Hit Okay on the window after you have entered your email address
  • Hit Okay on the window with "notification action"
  • Hit Save under "notification policy"
Version Application

All

 

Contributors