Severity

To modify the severity of an event Record of a security or network incident that is based on one or more logs, and on a customizable set of rules that are defined in the Event Policy., select a severity level from the drop-down list.

If the event is based on Threat Prevention logs, the event gets the severity from the protection type, not from the severity configured here.

To overwrite the severity:

1. Go to SmartEvent > Policy.

2. Select an event and right-click > Select Properties.

   The Edit Event Definition window opens.

3. In the Event Format tab, select Determine event's display name and severity from event logs.