Remove a device from the watchlist

You can remove a device from the watchlist if it no longer requires Advanced Analysis.

  1. Log into the Web UI on the Discover appliance or Command appliance.
  2. Click the System Settings icon and then click Analysis Priorities.
  3. If you are managing analysis priorities from a Command appliance, find the Discover appliance with the critical assets that you want to remove from the watchlist in the Manage Priorities from this Command Appliance section. Click Edit Properties in the row that contains the Discover appliance.
  4. At the top of page in the Advanced Analysis Watchlist section, click View the Watchlist. The Watchlist page appears displaying all the devices on the watchlist.
  5. To remove devices from the watchlist, complete the following steps:
    1. Select the checkbox next to the device name.
    2. Click Remove Devices.
  6. Click Save.
Note:It is possible to add devices to a blocklist, based on their unique MAC addresses, by modifying the running configuration file on the Discover appliance. Contact your ExtraHop administrator to add devices to a blocklist.
Published 2018-11-09 13:57