Severity

To modify the severity of an event, select a severity level from the drop-down list.

If the event is based on Threat Prevention logs, the event gets the severity from the protection type, not from the severity configured here.

To overwrite the severity:

1. Go to SmartEvent > Policy.
2. Select an event and right click > Select Properties.

   The Edit Event Definition window opens.

3. In the Event Format tab, select Determine event's display name and severity from event logs.