Watch List Expiry Date

[mohamed44]

Hi,

hope all is well.

Kindly, Is there a way to adjust the Expiry value of the watchlist to be Minutes, hours, or even Not Expire?

Thanks in advance!

FortiSIEM 

#watchlist

[Secusaurus]

Hi Muhammed,

As far as I know, you cannot change it on the predefined lists. You may only pick the items in it and change their expiration manually.

But you can define your own watchlists. When creating or changing a custom one, you can define the value exactly how you like it.

Best,

Christian

[mohamed44]

Hi Christian,

I believe that not the case I was asking if I can change the expiry date of watch list group to Never Expire

Thanks on Advance,

Muhammed

[Secusaurus]

Hi Muhammed,

I see, you asked for other values than days, weeks or months - not for where to change it.

Concerning "never": You can set it to expire in 99999 months. That's not exactly "never" but very close to it.

For shorter values, I assume, this is a technical issue. A lot of database cleanup of the FSM happens at midnight (local time) and I think checking the watchlists is one of the things that only runs once a day.

Best,

Christian