A. Only activate or de-activate multiple rules

B. Only view, edit, and activate a single rule at one time

C. Change the severity of multiple rules, and activate or de-activate multiple rules

D. Only change the severity of multiple rules

A. Syslog discovery

B. GUI log discovery

C. Auto log discovery

D. Pull events discovery

A. Data parsing

B. Data validation

C. Data classification

D. Data enrichment

A. Worker and collector

B. Collector and Windows agent

C. Supervisor and worker

D. Supervisor and collector

A. Data collection is paused duo to an issue, such as a change of password.

B. Data collection execution failed because the device is not reachable.

C. Data collection has not started.

D. Data collection is paused after the intervals shown for metrics.

A. When a syslog-relay is used to deliver logs to the FortiSIEM report server

B. When SNMP Is used for a range scan discovery

C. When syslog is sent from a network device to FortiSIEM without performing a discovery

D. When FortiSIEM pulls syslog from a network device to determine event types

A. Filters Threshold Time Window definitions

B. Filters Aggregation. Group By definition

C. Filters Aggregation Time Window definitions

D. Filters Group By definitions. Threshold