FortiSIEM
FortiSIEM provides Security Information and Event Management (SIEM) and User and Entity Behavior Analytics (UEBA)
Andy_G
Staff
Staff
Article Id 194095

Description

Summary of Topic

I have configured Synthetic Transaction Monitors and verified the associated Rules are firing yet an Incident is not created.

Solution Steps

This occurs if you have set the parameter, "Allow Incident Firing On", to "Approved Devices Only" .

To change this parameter setting and start receiving STM Incidents:

  1. Log into AO UI
  2. Navigate to Admin->General Settings->Discovery
  3. Click in radio button next to "All Devices" for the parameter "Allow Incident Firing On"

agodwin_FD39413_FD39557_tn_FD39557-1.jpg

 

Version application

All.

 

 

 

Contributors