• Introduction To Comodo CWatch Network
  • Purchase A License
  • Log-in To The Admin Console
• The Main Interface
• The Dashboard
• Customer Asset Management
  • Add Customers
  • Add Assets For Monitoring
    • Hard Assets
    • Soft Assets
  • Configure Nxlog And Rsyslog To Send Logs To CWatch Network Server
  • Edit Customers
• Query Management
  • Configure Event Queries
  • Long Term Analysis
  • Configure Custom Dashboards
  • Event Field Selection Settings
• Manage Rules
  • Manage Correlation Rules
  • Manage Tagged Rules
  • Manage Aggregation Rules
• Incidents
  • Manage Incidents
  • Incident Category Management
  • Category Action Management
• Lists
  • Manage Live Lists
  • Manage Live List Content
  • Manage Range List Content
  • Manage IP Range List Content
  • Manage Multiple Column List Content
• Manage Reports
• Administration
  • Event Collection
  • Phantom Settings
  • Manage Users
  • View License And Subscription Details
• Appendix 1 – Field Groups And Event Items Description
• Appendix 2 – CWatch Supported Logs
• About Comodo Security Solutions

Lists

• A list is a set of field values which can be used as parameters in event queries and correlation rules. cWatch features three type of lists, 'Live Lists', 'Range Lists' and 'IP Range Lists'.

• 'Live Lists' specify a single value.

• 'Range Lists' specify a range of values (e.g. port numbers).

• 'IP Range Lists' specify a range of IPs.

• Any updates to a list are dynamically reflected in all queries and rules in which they are used.

• Lists are created by first specifying the event field then populating it with values.

• Live Lists can be populated by entering values manually or by configuring correlation rules to feed values automatically from events. See List Mappings in 'Manage Correlation Rules' for more details.

• Values for range lists and IP range lists have to be entered manually.

See the following sections for more details:

• Manage Live Lists

• Manage Live List Content

• Manage Range List Content

• Manage IP Range List Content

• Manage Multiple Column List Content