I have configured Threat alerts to be emailed. This is working, however I'm getting information level alerts. I have setup a filter to only mail critical or high. I built this filter under objects/log forwarding, then log type threat. Is this the correct location? I would like to not see any log lower the medium level. How do I stop getting information alerts?
Can you post a screenshot of the way you have the log-forwarding configured. If configured correctly you shouldn't be getting anything that you haven't specified unless it's matching something else in your log-forwarding policy.
That's interesting, I don't see any reason why you would be getting informational alerts from what's on the screenshot. I might try reaching out to TAC and seeing if they can get it to mimic with their equipment.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!
The Live Community thanks you for your participation!