Fortinet
FCP_FAZ_AD-7.4 · Question #137
What is the purpose of using prefilters when configuring event handlers?
The correct answer is A. They limit which logs are checked for matches by the other filters. Prefilters are applied before the other filters in an event handler, so they can be used to reduce the number of logs that need to be processed. This can improve the performance of the event
Event Management
Question
What is the purpose of using prefilters when configuring event handlers?
Options
- AThey limit which logs are checked for matches by the other filters.
- BThey can filter the logs before they are processed by FortiAnalyzer
- CThey download new filters to be used in event handlers.
- DThey are common filters applied simultaneously to all event handlers.
How the community answered
(25 responses)- A80% (20)
- B12% (3)
- C4% (1)
- D4% (1)
Explanation
Prefilters are applied before the other filters in an event handler, so they can be used to reduce the number of logs that need to be processed. This can improve the performance of the event
Topics
#event handlers#prefilters#log filtering#filter priority
Community Discussion
No community discussion yet for this question.