Refer to the exhibit. A FortiSIEM administrator wants to group some attributes for a report, but is not able to do so successfully. As shown in the exhibit, why are some of the fields highlighted in red?
An administrator defines SMTP as a critical process on a Linux server. It the SMTP process is stopped. FortiSIEM will generate a critical event with which event type?