Working with Custom Properties

FortiSIEM includes over 30+ pre-defined global threshold properties that you can edit and use in rules, but you can also create custom threshold properties. 

This section provides the procedure to configure Custom Properties.

Adding a Custom Property

Complete these steps to add a custom property:

  1. Go to ADMIN > Device Support > Custom Properties.
  2. Click New.
  3. Enter a Name and Display Name for the new property. 
  4. Enter the Default Value for the threshold. 
  5. Select the Value Type of threshold value.
    For most global threshold values, select Double. For Map thresholds, which apply to disks and interfaces, select the Item Type for the threshold value, and select the Component Type to which it applies. 
  6. Click Save.

Modifying a Custom Property

Complete these steps to modify a custom property:

  1. Select one or more property from the list.
  2. Click the required option:
    • Edit to modify a property setting.
    • Delete to remove a property.
  3. Click Save.