Free Preparation Discussions
MENU
Fortinet Exam NSE5_FSM-6.3 Topic 2 Question 19 Discussion
Topic #: 2
An administrator wants to search for events received from Linux and Windows agents.
Which attribute should the administrator use in search filters, to view events received from agents only.
Search Filters in FortiSIEM: When searching for specific events, administrators can use various attributes to filter the results.
Attribute for Agent Events: To view events received specifically from Linux and Windows agents, the attribute External Event Receive Agents should be used.
Function: This attribute filters events that are received from agents, distinguishing them from events received through other protocols or sources.
Search Efficiency: Using this attribute helps the administrator focus on events collected by FortiSIEM agents, making the search results more relevant and targeted.
Reference: FortiSIEM 6.3 User Guide, Event Search and Filters section, which describes the available attributes and their usage for filtering search results.
Tracie
2 months agoMinna
2 months agoLamonica
2 months agoTiffiny
1 months agoChara
2 months agoChandra
2 months agoAdria
2 months agoMalcom
2 months agoIlona
1 months agoLavonna
1 months agoKate
2 months agoBillye
2 months agoStephaine
2 months agoDick
2 months agoVannessa
2 months agoIdella
2 months ago