The event status is shown as Unhandled with Critical severity, indicating that the associated security risk is still open and has not yet been investigated or resolved.

The query is short, direct, and specific, which minimizes the number of processed tokens. It avoids unnecessary wording and does not expand the timeframe or scope beyond what is required, resulting in lower token consumption compared to longer or broader queries.

FortiAnalyzer allows incident notifications to be sent through multiple connectors and external platforms such as email, Slack, or other integrated systems. A single incident can trigger notifications to multiple configured destinations based on the defined automation or notification settings.

Templates define the layout and content structure of a report but do not include advanced report settings such as scheduling, output format, or delivery options. These advanced configuration settings are available only when creating and managing actual reports derived from templates.