Security

Fortinet com model action field

marga
New Member

Hello,

I need to correlate forti_action to action field according to cim model . Some values are missing :

Example : 

Pass = allowed 

monitored= deferred

dropped= blocked

 

pba-close= ?

perf-stats = ?

pba-close = ?

roll-log = ?

Pba-create = ?

Can you help ?

thank you

Labels (1)
0 Karma
Get Updates on the Splunk Community!

Dashboards: Hiding charts while search is being executed and other uses for tokens

There are a couple of features of SimpleXML / Classic dashboards that can be used to enhance the user ...

Splunk Observability Cloud's AI Assistant in Action Series: Explaining Metrics and ...

This is the fourth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how ...

Brains, Bytes, and Boston: Learn from the Best at .conf25

When you think of Boston, you might picture colonial charm, world-class universities, or even the crack of a ...