SIEM Dashboard & Log Analysis Blueprint

I’m putting together a comprehensive design document for a Fortinet-based SOC and need an experienced hand to shape both the dashboard layout and the underlying log-analysis blueprint. The end product must keep incident response front and centre while covering the full spectrum of threat detection, anomaly detection and user activity monitoring use cases. Here’s what I need you to produce: • Dashboard design schema that shows exactly which widgets, data sources and visualisations will surface the highest-value indicators for incident responders. • A written blueprint for parsing and normalising Fortinet logs, including field mappings, enrichment steps and correlation logic that supports the above use cases. • Clearly defined manual triage procedures: step-by-step guidance for analysts on validating, prioritising and escalating alerts. • A KPI framework that details measurable metrics—MTTD, MTTR, false-positive rate, analyst utilisation, etc.—and ties each one back to specific dashboard elements. I’ll supply current log samples and access to our FortiSIEM lab so you can verify field availability and test correlations. Please base recommendations on proven SOC best practices and keep the language clear enough for both senior analysts and new hires to follow. Deliver the final package as a structured PDF (or DOCX) accompanied by any supporting spreadsheets or diagrams.