How to create lists on FortiSIEM for later use?

[gwaihir]

Hello Community.

Please give some tip on how to create lists like (words, emails, names, etc) for later use.

case scenario: using the filter "Mail Sender" --> IN --> (select from cmdb the list emails) 

Regards.

[Richie_C · Accepted solution]

Hi @gwaihir 

I believe you are referring to a static list. This is essentially the same as a watch list that doesn't expire in FortiSIEM. 

You can use the following instructions to create a new watch list:

https://help.fortinet.com/fsiem/7-2-3/Online-Help/HTML5_Help/Creating_a_watch_list.htm

It is also possible to import or export a list using the following instructions.

https://help.fortinet.com/fsiem/7-2-3/Online-Help/HTML5_Help/Exporting_watch_list.htm

I hope you find this helpful.

Regards

Richard