What does the Frequency field determine on a rule?

Question

Options

• AHow often the rule will evaluate the subpattern.
• BHow often the rule will trigger for the same condition.
• CHow often the rule will trigger.
• DHow often the rule will take a clear action.

• A
  72% (23)
• B
  16% (5)
• C
  3% (1)
• D
  9% (3)

Explanation

Rule Evaluation in FortiSIEM: Rules in FortiSIEM are evaluated periodically to check if the defined conditions or subpatterns are met. Frequency Field: The Frequency field in a rule determines the interval at which the rule's subpattern will be evaluated. Evaluation Interval: This defines how often the system will check the incoming events against the rule's subpattern to determine if an incident should be triggered. Impact on Performance: Setting an appropriate frequency is crucial to balance between timely detection of incidents and system performance. If the Frequency is set to 5 minutes, the rule will evaluate the subpattern every 5 minutes. This means that every 5 minutes, the system will check if the conditions defined in the subpattern are met by the incoming events.

No community discussion yet for this question.