Refer to the exhibit.
An administrator is investigating a FortiSIEM license issue.
The procedure is for which offline licensing condition?
Advanced Analytical Rules Engine: FortiSIEM's rules engine allows for complex event correlation using multiple subpatterns.
Operations for Referencing Subpatterns:
FOLLOWED_BY: This operation is used to indicate that one event follows another within a specified time window.
OR: This logical operation allows for the inclusion of multiple subpatterns, where the rule triggers if any of the subpatterns match.
AND: This logical operation requires all referenced subpatterns to match for the rule to trigger.
Usage: These operations allow for detailed and precise event correlation, helping to detect complex patterns and incidents.
Reference: FortiSIEM 6.3 User Guide, Advanced Analytics Rules Engine section, which explains the use of different operations to reference subpatterns in rules.
Maia
1 months agoGlenna
18 days agoSylvia
24 days agoAnnett
1 months agoAlita
2 months agoEllen
18 hours agoShawna
1 months agoMajor
2 months agoLawanda
2 months agoWillodean
2 months agoLouann
1 months agoDerick
1 months agoDeonna
2 months agoTiara
1 months agoElinore
1 months agoHeidy
2 months agoXochitl
2 months agoPearline
2 months agoColette
2 months agoVelda
2 months agoCorrina
2 months ago