Forum Discussion

CodnChips's avatar
CodnChips
Brass Contributor
Dec 06, 2023

Edit a single watchlist item

Hi,

I have a watchlist, let's say it has 3000 watchlist items present.

I want to modify the value of an entry - an IP address that is no longer required.

Can I edit this programmatically?   At present I manually have to scroll through each page of results with a CTRL+F to find on the page which is really lame.

Surely there must be a better way?

  • Hey CodnChips 

     

    have you considered creating a logic app to find the value and change it within the watchlist

     

    There are logic app components for watchlists for sentinel

     

    Check out this reference here

    • CodnChips's avatar
      CodnChips
      Brass Contributor
      Hey BillClarksonAntill, thanks very much for your response & link. I had not investigated LogicApps for this, so I will have a read n click, and see what I can see!
      • CodnChips's avatar
        CodnChips
        Brass Contributor
        A logicApp does seem a bit like "a sledgehammer to crack a walnut" and I don't like that using them incurs cost. In order to manage\maintain threat intelligence, basic list admin should be a fundamental piece of functionality within the interface. I'll find somewhere to raise it as a feature request.

Resources