FortiSIEM Discussions
mohamed44
New Contributor

Watch List Expiry Date

Hi,

hope all is well.

 

Kindly, Is there a way to adjust the Expiry value of the watchlist to be Minutes, hours, or even Not Expire?

 

Thanks in advance!

FortiSIEM 

#watchlist

Muhammed
Muhammed
3 REPLIES 3
Secusaurus
Contributor II

Hi Muhammed,

 

As far as I know, you cannot change it on the predefined lists. You may only pick the items in it and change their expiration manually.

But you can define your own watchlists. When creating or changing a custom one, you can define the value exactly how you like it.

 

Best,

Christian

FCP & FCSS Security Operations | Fortinet Advanced Partner
FCP & FCSS Security Operations | Fortinet Advanced Partner
mohamed44
New Contributor

Hi Christian,

 

I believe that not the case I was asking if I can change the expiry date of watch list group to Never Expire

Thanks on Advance,

Muhammed

Muhammed
Muhammed
Secusaurus

Hi Muhammed,

 

I see, you asked for other values than days, weeks or months - not for where to change it.

 

Concerning "never": You can set it to expire in 99999 months. That's not exactly "never" but very close to it.

For shorter values, I assume, this is a technical issue. A lot of database cleanup of the FSM happens at midnight (local time) and I think checking the watchlists is one of the things that only runs once a day.

 

Best,

Christian

FCP & FCSS Security Operations | Fortinet Advanced Partner
FCP & FCSS Security Operations | Fortinet Advanced Partner
Announcements

Welcome to your new Fortinet Community!

You'll find your previous forum posts under "Forums"