How to Configure WATCHLIST in Aruba IntroSpect
How to configure Watchlist in Aruba IntroSpect?
WATCHLIST is a custom group of Users/Entities which you could use for monitoring Entity or Users and their Risk Scores on the Overview Page. You could use these as Filter during investigations either via Conversations or Log Analysis.
From Overview Page on Aruba IntroSpect Analyzer UI:
From the Watch List, click on the drop down button > Select New Watchlist.
You could also configure Watchlist From Menu > Configuration > Watchlists > New Watchlist
Now, you could provide a relevant Name for the Watchlist and then add the items like Username, IP, Hostname, etc.
You could either use this for Public or Private level access.