Challenge
The challenge of this use-case is to display the metrics of the lifecycle of an Alert in CyOPs
Solutions
By calculating Alert ingestion, assignment and resolution time, the metrics are displayed on the details page of the Alert
Prerequisites
Community Edition OVA
Flow
⦁ Ingest an Alert in CyOPs and assign to respective analyst
⦁ Perform required investigation on the alert (Optional)
⦁ Once required activity is finished on the Alert, update Alert status to Close
⦁ Add Closer Notes and click on Update
Screenshot s
Metrics View:
Playbook Location:
Automation -> Playbooks -> Collections -> 07 - SLA -Alerts -> Alert > Set SLA - 06 - Metrics
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.