FortiInsight
FortiInsight monitors endpoint activity in the form of events. It provides automated inspection and alerts against these events in the form of policy and Augmented intelligence (AI) based inspection.
jmcritchie
Staff
Staff
Article Id 194562
Description

To create a repeatable search which can be run multiple times, set up a new Collection.


Collections provide a way of saving a 'snapshot' of events at a certain time, but can also be 'refreshed', i.e. repeated to show events that match the search since you initially created the Collection.


Refresh a Collection on a daily/weekly/monthly basis to see updated results.  These can be exported to CSV.


Contributors