Share static watchlist values with multiple Trellix ESM devices in your organization by importing and exporting the watchlists.
Verify that you have administrator rights or belong to an access group with watchlist permissions.
Without these privileges, you cannot edit, export, or remove private watchlists or watchlists that contain strings or rules names.
You must have a Trellix GTI license to export watchlists that contain GTI Malicious IPs and GTI Suspicious IPs values.
From the Trellix ESM dashboard, click
.png "menu.png")
and select Watchlists.Click
.png "GUID-90CC508D-C258-41AB-9D9C-4E1D7DE5FBCB-low.png")
to list active and inactive watchlists.Export a watchlist.
Select an existing watchlist and click Export.
Note
You cannot export Trellix GTI watchlists.
Browse to the location where you want to export the watchlist file.
Click Confirm.
Import a watchlist.
Select Import.
Browse to the location of the watchlist file you want to import.
Click Confirm.