Forum Discussion
How to update watchlist dynamically as opposed to manually updating csv and importing it again
Hello I have a watch list that works fine but the problem I have is that each time I want to add another component to the watchlist, I have to manually update the csv file, delete the existing Watchlist from Sentinel and reimport the Watchlist into Sentinel again. I would like to find a way of updating the Watchlist dynamically but I am told that the feature is currently not available
Could anyone please confirm this with me.
Thanks Caitlin
- Rod_Trent
Microsoft
- Thank you very much for the pointers Rodtrent
Much appreciated
- CliveWatson
- Hi Clive just wanted to check if is it possible to use a domain for a watchlist column instead of FQDN. I am able to use the FQDN successfully but using the domain yields not results. Will appreciate if you could please confirm with me.
Thank you
Caitlin- Domain works fine for our use. We have a ARM template to deploy the watchlist as well as a playbook that works.
- thank you very much Clive for all your help. I know from the code you provided me I am able to pull information from different departments using a Watch but I am now looking for how to achieve that in a cross workspace environment. Would that be possible?
Look forward to hearing from you soon
Caitlin
