If a performance rule is triggered repeatedly due to high CPU use, what occurs in the incident table?

Question

Options

• AA now incident is created each time the rule is triggered. and the First Seen and Last Seen times
• BA new incident is created based on the Rule Frequency value, and the First Seen and Last Seen
• CThe Incident Count value increases, and the First Seen and Last Seen times update.
• DThe incident status changes to Repeated, and the First Seen and Last Seen times are updated.

• A
  15% (4)
• B
  4% (1)
• C
  78% (21)
• D
  4% (1)

Explanation

Incident Management in FortiSIEM: FortiSIEM tracks incidents and their occurrences to help administrators manage and respond to recurring issues. Performance Rule Triggering: When a performance rule, such as one for high CPU usage, is repeatedly triggered, FortiSIEM updates the corresponding incident rather than creating a new Incident Table Updates: Incident Count: The Incident Count value increases each time the rule is triggered, indicating how many times the incident has occurred. First Seen and Last Seen Times: These timestamps are updated to reflect the first occurrence and the most recent occurrence of the incident.

No community discussion yet for this question.