Upcoming community maintenance Oct. 27th through Oct. 29th
For more info click here

How to Configure WATCHLIST in Aruba IntroSpect

MVP
MVP
Q:

How to configure Watchlist in Aruba IntroSpect?



A:

WATCHLIST is a custom group of Users/Entities which you could use for monitoring Entity or Users and their Risk Scores on the Overview Page. You could use these as Filter during investigations either via Conversations or Log Analysis.

To Configure:

From Overview Page on Aruba IntroSpect Analyzer UI: 

From the Watch List, click on the drop down button > Select New Watchlist.

 

You could also configure Watchlist From Menu > Configuration > Watchlists > New Watchlist

Now, you could provide a relevant Name for the Watchlist and then add the items like Username, IP, Hostname, etc.

You could either use this for Public or Private level access. 

Version history
Revision #:
1 of 1
Last update:
‎08-04-2020 09:38 PM
Updated by:
 
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: