Viewing watchlists
To view watchlists, follow these steps.
How to view Watchlists
- In the FortiDLP Console, on the left-hand sidebar, click
.
By default, entities matching watchlists during the last 24 hours are shown. - Optionally, do the following:
- To view a detection report for entities assigned a flagged label, on the top-right corner of the watchlist, click
.
- To view the Detection event stream filtered by a flagged label, on the top-right corner of the watchlist, click
. - To view the Users module filtered by a specific user, beside the user's name in the watchlist, click
.
- To view the Node profile page for a node, beside the node's hostname in the watchlist, click
.
- To open a new browser tab and navigate to either the Users module or Node profile page , click
. - To filter by a specific value on the page or view more information about a value, click the value and then click the relevant context box button.
Copies a value to your clipboard.- Filters by a value within the Investigate module.
Displays more information about a value.
Displays a submenu containing the following options:- Filters by a value within the Users module.
- Filters by a value within the Nodes module (if selected from a user's context box) or takes you to the Node profile page (if selected from a node's context box).
The following list summarizes the buttons that display:
- To view a detection report for entities assigned a flagged label, on the top-right corner of the watchlist, click