What is the purpose of using prefilters when configuring event handlers?

The correct answer is A. They limit which logs are checked for matches by the other filters. Prefilters are applied before the other filters in an event handler, so they can be used to reduce the number of logs that need to be processed. This can improve the performance of the event

Handlers and Playbooks

Question

Options

AThey limit which logs are checked for matches by the other filters.
BThey can filter the logs before they are processed by FortiAnalyzer
CThey download new filters to be used in event handlers.
DThey are common filters applied simultaneously to all event handlers.

How the community answered

(40 responses)

A
75% (30)
B
8% (3)
C
3% (1)
D
15% (6)

Explanation

Prefilters are applied before the other filters in an event handler, so they can be used to reduce the number of logs that need to be processed. This can improve the performance of the event

Topics

#event handlers#prefilters#log filtering#filter configuration

Community Discussion

No community discussion yet for this question.

Full NSE5_FAZ-7.2 Practice