Adding descriptions of events in FortiSIEM

This section explains how to add descriptions to detection events and service events that are sent by Kaspersky CyberTrace.

To add descriptions to events from Kaspersky CyberTrace:

1. Open the FortiSIEM web console.
2. Select Admin > Device Support > Event > New.

   The Event Definition window opens.

3. Specify the following data:
   • In the Name field, specify PH_DEV_MON_CUST_СYBERTRACE_DETECTION_EVENT.
   • In the Device Type field, select Kaspersky CyberTrace.
   • In the Event Type Group field, select Security.
   • In the Severity field, select 8-MEDIUM.
   • In the Description field, specify Detection events from Kaspersky CyberTrace.
4. Click Save.
5. Select Admin > Device Support > Event > New.
6. In the Event Definition window that opens, specify the following data:
   • In the Name field, specify PH_DEV_MON_CUST_CYBERTRACE_SERVICE_EVENT.
   • In the Device Type field, select Kaspersky CyberTrace.
   • In the Event Type Group field, select Info.
   • In the Severity field, select 4-LOW.
   • In the Description field, specify Service events from Kaspersky CyberTrace.
7. Click Save.
8. In the Admin > Device Support > Event section, click Apply, and in the message box that opens click Yes to agree to the changes.