Assigned Collector Groups
The Assigned Collector Groups pane on the right lists the various Collector Groups in the system. By default, all Collector Groups are assigned to the Default Playbook policy. You can reassign one or more Collector Groups to different Playbook policies, if preferred.
Note: When upgrading your FortiEDR system, all existing Collector Groups are automatically assigned to the Default Playbook policy.
Cloning a Playbook Policy
Cloning a Playbook policy unassigns the policy from one Collector Group and then reassigns it to a different Collector Group. A Collector Group can only be assigned to one Playbook policy.
- In the AUTOMATED INCIDENT RESPONSE - PLAYBOOKS page, select the Playbook policy row that you want to clone in the Playbook Policies list.
- Do one of the following:
- Select the checkbox(es) of the Collector Group(s) in the Assigned Collector Groups pane that you want to assign to the cloned Playbook policy. Then, click the Unassign Group button in the Assigned Collector Groups pane.
- Click the Collector Group in the Assigned Collector Groups pane that you want to assign to the cloned Playbook policy. Then, drag the Collector Group onto the cloned Playbook policy in the Playbook Policies list, as shown below:
The following message displays.
Click Yes.
- Select the checkbox(es) of the Collector Group(s) in the Assigned Collector Groups pane that you want to assign to the cloned Playbook policy. Then, click the Unassign Group button in the Assigned Collector Groups pane.