NSE5_FSM-6.3 · Question #7
How is a subpattern for a rule defined?
The correct answer is D. Filters Aggregation, Time Window definitions. Rule Subpattern Definition: In FortiSIEM, a subpattern within a rule is used to define specific conditions and criteria that must be met for the rule to trigger an incident or alert. Components of a Subpattern: The subpattern includes the following elements: Filters: Criteria…
Question
How is a subpattern for a rule defined?
Options
- AFilters Aggregation, Group By definition
- BFilters Group By definitions, Threshold
- CFilters Threshold, Time Window definitions
- DFilters Aggregation, Time Window definitions
How the community answered
(31 responses)- A10% (3)
- B13% (4)
- C3% (1)
- D74% (23)
Explanation
Rule Subpattern Definition: In FortiSIEM, a subpattern within a rule is used to define specific conditions and criteria that must be met for the rule to trigger an incident or alert. Components of a Subpattern: The subpattern includes the following elements: Filters: Criteria to filter the events that the rule will evaluate. Aggregation: Conditions that define how events should be aggregated or grouped for analysis. Time Window Definitions: Specifies the time frame over which the events will be evaluated to determine if the rule conditions are met.
Topics
Community Discussion
No community discussion yet for this question.