{
    "name": "fortinet-fortisiem",
    "description": "FortiSIEM provides integrations that allow you to query and make changes to the CMDB, query events, and send incident notifications. Provide actions like get incidents, comment incident, cleared incident, get device details, get monitored organizations, report related actions and get all associated events for an incident from FortiSIEM.",
    "version": "4.4.0",
    "buildNumber": 7044,
    "tags": null,
    "publishedDate": 1658766574,
    "lastUpdated": 1772011527,
    "type": "connector",
    "label": "Fortinet FortiSIEM",
    "availableVersions": [
        "2.3.0",
        "2.4.0",
        "3.0.0",
        "3.0.1",
        "3.1.0",
        "4.0.0",
        "4.1.0",
        "4.1.1",
        "4.2.0",
        "4.3.0",
        "4.3.1",
        "4.3.2",
        "4.4.0",
        "4.5.0",
        "5.0.0",
        "5.0.1",
        "5.0.2",
        "5.0.3",
        "5.1.0",
        "5.1.1",
        "5.2.0",
        "5.2.1",
        "5.2.2",
        "5.2.3",
        "5.3.0",
        "5.4.0",
        "5.4.1",
        "5.4.2",
        "5.4.3",
        "5.5.0"
    ],
    "scm": {
        "forks": 0,
        "watchers": 0,
        "stars": 0,
        "type": "private",
        "url": "https://gitlab-van.corp.fortinet.com/fortisoar/connectors-group/connector-fortinet-fortisiem"
    },
    "infoPath": "/content-hub/fortinet-fortisiem-4.4.0/7044",
    "publisher": "Fortinet",
    "certified": true,
    "category": "Analytics and SIEM",
    "iconLarge": "/content-hub/fortinet-fortisiem-4.4.0/7044/images/fortisiem_large.png",
    "operations": [
        {
            "description": "Retrieves a list and details of incidents from the Fortinet FortiSIEM server based on the search criteria you have specified.",
            "title": "List Incidents",
            "operation": "get_incidents",
            "visible": true
        },
        {
            "description": "Get details of an incident from Fortinet FortiSIEM server based on the incident IDs you have specified.",
            "title": "Get Incident Details",
            "operation": "get_incident_details",
            "visible": true
        },
        {
            "description": "Update attributes of specific incident on the Fortinet FortiSIEM server based on inputs you have specified.",
            "title": "Update Incident",
            "operation": "update_incident",
            "visible": true
        },
        {
            "description": "Retrieves all associated events for a specified incident from the Fortinet FortiSIEM server based on the incident ID you have specified.",
            "title": "Get Events For Incident",
            "operation": "get_associated_events",
            "visible": true
        },
        {
            "description": "Adds a comment to a specific incident on the Fortinet FortiSIEM server based on the incident ID you have specified.",
            "title": "Comment Incident",
            "operation": "incident_comment",
            "visible": true
        },
        {
            "description": "Clears an incident with the reason you have specified on the Fortinet FortiSIEM server based on the incident ID you have specified.",
            "title": "Clear Incident With Reason",
            "operation": "clear_incident",
            "visible": true
        },
        {
            "description": "Changes the severity of a specific incident severity to LOW, MEDIUM or HIGH on the Fortinet FortiSIEM server based on the incident ID you have specified.",
            "title": "Change Severity",
            "operation": "change_incident_severity",
            "visible": true
        },
        {
            "description": "Changes the resolution of a specific incident True Positive or False Positive on the Fortinet FortiSIEM server based on the incident ID you have specified",
            "title": "Change Resolution",
            "operation": "change_incident_resolution",
            "visible": true
        },
        {
            "description": "Searches for events in the Fortinet FortiSIEM server based on search attributes and other input parameters you have specified.",
            "title": "Search Events",
            "operation": "search_events",
            "visible": true
        },
        {
            "description": "Get details of specific event on the Fortinet FortiSIEM server based on the event ID you have specified.",
            "title": "Get Event Details",
            "operation": "get_event_details",
            "visible": true
        },
        {
            "description": "Retrieves a short description for all devices that are configured on the Fortinet FortiSIEM server.",
            "title": "Get All Devices",
            "operation": "get_devices_details",
            "visible": true
        },
        {
            "description": "Retrieves a short description for devices that are configured on the Fortinet FortiSIEM server, based on the IP address range that you have specified.",
            "title": "Get All Devices For Specified IP Address Range",
            "operation": "get_devices_details_in_address",
            "visible": true
        },
        {
            "description": "Retrieves details of a specific device that is configured on the Fortinet FortiSIEM server, based on the Device IP that you have specified.",
            "title": "Get Device Information",
            "operation": "get_device_info",
            "visible": true
        },
        {
            "description": "Retrieves a list and attributes of all monitored devices that are configured on the Fortinet FortiSIEM server.",
            "title": "List Monitored Devices and Attributes",
            "operation": "get_monitored_devices",
            "visible": true
        },
        {
            "description": "Retrieves a list of all monitored organizations that are configured on the Fortinet FortiSIEM server.",
            "title": "List Monitored Organizations",
            "operation": "get_monitored_organizations",
            "visible": true
        },
        {
            "description": "Retrieves the details of an organization based on the organization ID that you have specified from Fortinet FortiSIEM server.",
            "title": "Get Organization Details",
            "operation": "get_org_name_by_org_id",
            "visible": true
        },
        {
            "description": "Runs an advanced search query on the Fortinet FortiSIEM server, based on the search conditions and other input parameters you have specified.",
            "title": "Run Advanced Search Query",
            "operation": "run_report",
            "visible": true
        },
        {
            "description": "Retrieves all event attributes from the Fortinet FortiSIEM server.",
            "title": "Get Event Attributes",
            "operation": "get_incident_attributes",
            "visible": true
        },
        {
            "description": "Retrieves data for events or incidents from the Fortinet FortiSIEM server based on the executed query ID you have specified. ",
            "title": "Get Events Data By Query ID",
            "operation": "get_events_by_query_id",
            "visible": true
        },
        {
            "description": "Creates a watch list in the FortiSIEM database. A watch list can contain one or more watch list entries",
            "title": "Create Watch List",
            "operation": "create_watchlist_group",
            "visible": true
        },
        {
            "description": "Retrieves details for all watch lists or for specific watch lists based on input parameters you have specified.",
            "title": "Get Watch Lists",
            "operation": "get_watch_lists",
            "visible": true
        },
        {
            "description": "Returns the count of all watch list entries from all watch lists in Fortinet FortiSIEM.",
            "title": "Get Watch List Entries Count",
            "operation": "get_watch_list_entries_count",
            "visible": true
        },
        {
            "description": "Retrieves the specific watch list entry from Fortinet FortiSIEMfor based on the watch list entry ID you have specified. ",
            "title": "Get Watch List Entry",
            "operation": "get_watch_list_entry",
            "visible": true
        },
        {
            "description": "Adds watch list entries to one or more watch lists based on watch list ID and other input parameters you have specified. ",
            "title": "Add Watch List Entries to Watch List",
            "operation": "add_watch_list_entries_to_watch_list_groups",
            "visible": true
        },
        {
            "description": "Updates a watch list entry in the FortiSIEM database based on watch list entry ID and other input parameters you have provided",
            "title": "Update Watch List Entry",
            "operation": "update_watch_list_entry",
            "visible": true
        },
        {
            "description": "Deletes watch list entries from the FortiSIEM database based on the ID of the watch list entries you have specified",
            "title": "Delete Watch List Entry",
            "operation": "delete_watch_list_entry",
            "visible": true
        },
        {
            "description": "Deletes watch lists from the FortiSIEM database based on the ID of the watch lists you have specified",
            "title": "Delete Watch List",
            "operation": "delete_watch_list",
            "visible": true
        },
        {
            "description": "Creates the definition of a lookupTable in the FortiSIEM server based on the name, column list, and other input parameters you have specified.",
            "title": "Create Lookup Table",
            "operation": "create_lookup_table",
            "visible": true
        },
        {
            "description": "Retrieves the list of all lookupTable definitions from the FortiSIEM server based on the input parameters you have specified.",
            "title": "Get All Lookup Table",
            "operation": "get_all_lookup_tables",
            "visible": true
        },
        {
            "description": "Deletes the lookupTable definition from the FortiSIEM server based on the lookup table ID you have specified.",
            "title": "Delete Lookup Table",
            "operation": "delete_lookup_table",
            "visible": true
        },
        {
            "description": "Imports the data of a specific CSV file in FortiSOAR to a specific lookup table in FortiSIEM based on the File/Attachment IRI, lookup table ID, and other input parameters you have specified.",
            "title": "Import Lookup Table Data",
            "operation": "import_lookup_table_data",
            "visible": true
        },
        {
            "description": "Checks the status of the import lookup table data task in FortiSIEM based on the lookup table ID and task ID you have specified.",
            "title": "Check Import Task Status",
            "operation": "check_import_task_status",
            "visible": true
        },
        {
            "description": "Retrieves items of the specified lookup table from FortiSIEM based on the lookup table ID and other input parameters you have specified.",
            "title": "Get Lookup Table Data",
            "operation": "get_lookup_table_data",
            "visible": true
        },
        {
            "description": "Updates items of a specified lookup table based on the lookup table ID, key, column data, and other input parameters you have specified.",
            "title": "Update Lookup Table Data",
            "operation": "update_lookup_table_data",
            "visible": true
        },
        {
            "description": "Delete items of the specified lookup table in FortiSIEM based on the lookup table ID and primary keys you have specified.",
            "title": "Delete Lookup Table Data",
            "operation": "delete_lookup_table_data",
            "visible": true
        }
    ],
    "help": "https://docs.fortinet.com/document/fortisoar/4.4.0/fortinet-fortisiem/318/fortinet-fortisiem-v4-4-0",
    "dependentSolutionPacks": [],
    "releaseNotes": "available"
}