Fortinet com model action field

Security

Hello,

I need to correlate forti_action to action field according to cim model . Some values are missing :

Example :

Pass = allowed

monitored= deferred

dropped= blocked

pba-close= ?

perf-stats = ?

pba-close = ?

roll-log = ?

Pba-create = ?

Can you help ?

thank you

Get Updates on the Splunk Community!

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...

OT is a different environment to traditional IT and can have interesting challenges when interfacing the ...

Beyond the Black Box: Correlating AI Performance and Tokenomics with Splunk Agent Observability As ...

Join the Conversation