Manage Annotations

Manage Annotations settings allow you to view and edit all your annotations in one place. The search function allows you to search for any text in the Annotation Name and Annotation Description columns.

When you hover over an annotation in the Events table, a tooltip shows the annotation name and description. When you click the annotation, all the annotation details are displayed in a pop-up window.

You can open the Entity Panel by clicking the Entity Name when the entity is a valid IP, CIDR, domain, or URL. Right-click an entity with a valid IP to Search Events, View/Create Annotations, perform an Entity Lookup and Global Search, or open a Playbook.

Adding and removing annotation

To create an annotation:

1. Click Add Annotations > Create Annotation.
2. Configure the annotation settings:

   Select an annotation type	Select Application, Environment, Location, Owner, Role or Tag.
   Enter an annotation name	Enter a name for the annotation.
   Enter a description	Enter the annotation.

3. Click Save.

To add annotations with a CSV file:

1. Create the CSV file. The file must contain the following : annotation type, annotation name, description, entity, entity_type.

   The annotation type must begin with a lower case letter, and the annotation name must be unique within the same type.

   

2. Click Add Annotations > Upload CSV.

3. Upload the CSV file.

4. Click Save.

To edit an annotation:

1. Click the gear icon in the top-right corner of the page.
2. Click Manage Annotations.
3. Click the Actions menu at the right side of the annotation and select Edit Annotation.

   

4. Update the annotation and click Save.

To delete an annotation:

1. Click the gear icon in the top-right corner of the application.
2. Click Manage Annotations.
3. Click the Actions menu at the right side of the annotation and select Remove Annotation.

   

4. Click Confirm.

Adding and removing entities

To add entities:

1. Click the gear icon in the top-right corner of the page.
2. Click Manage Annotations.
3. Click +Add Entity. The Add Entities dialog opens.

   

4. Enter one or more entities (IP Address, CIDR, domain or username) separated by a comma, space, or return.

   

5. Click Save. FortiNDR Cloud validates the fields and identifies any errors.

   

To bulk remove entities:

1. Click the gear icon in the top-right corner of the page.
2. Click Manage Annotations.
3. Click Remove bulk entities.

   

4. Click Confirm.