FortiSOAR Knowledge Base
FortiSOAR: Security Orchestration and Response software provides innovative case management, automation, and orchestration. It pulls together all of an organization's tools, helps unify operations, and reduce alert fatigue, context switching, and the mean time to respond to incidents.
Andy_G
Staff
Staff
Article Id 194123
Description

Challenge 

The challenge of this use-case is to display the metrics of the lifecycle of an Alert in CyOPs


Solutions

By calculating Alert ingestion, assignment and resolution time, the metrics are displayed on the details page of the Alert

 

Prerequisites

Community Edition OVA


Flow

⦁ Ingest an Alert in CyOPs and assign to respective analyst

⦁ Perform required investigation on the alert (Optional)

⦁ Once required activity is finished on the Alert, update Alert status to Close

⦁ Add Closer Notes and click on Update


Screenshot s

 

Metrics View:

 

image

 

 

 

 

 

Playbook Location:

Automation -> Playbooks -> Collections -> 07 - SLA -Alerts -> Alert > Set SLA - 06 - Metrics


image



Contributors