FortiSIEM

Search and update events of FortiSIEM and manage resource lists.

Analytics & SIEM · FortiSIEM

Configuration parameters

  • isFetch — Fetch incidents
  • incidentType — Incident type
  • host — Server URL (e.g. https://192.168.0.1) (required)
  • credentials — Credentials (required)
  • unsecure — Trust any certificate (not secure)
  • proxy — Use system proxy settings

Commands (9)

  • fortisiem-add-item-to-resource-list

    add element to a resource list.

  • fortisiem-clear-incident

    Clear (close) a FortiSIEM incident.

  • fortisiem-get-cmdb-devices

    Returns the description of each device.

  • fortisiem-get-events-by-filter

    Returns an event list according to the specified filters.

  • fortisiem-get-events-by-incident

    Get events by incidents.

  • fortisiem-get-events-by-query

    Returns event list filtered by query.

  • fortisiem-get-lists

    Get all FortiSIEM resource lists hierarchy.

  • fortisiem-get-resource-list

    Lists all elements in a resource list.

  • fortisiem-remove-item-from-resource-list

    Removes elements from a resource list.