Sharing information via Collections¶

The network team discovers suspicious traffic and wants to share the information with an independently operating security team. Instead of exporting the information and sending it via email, they create a Collection containing the relevant Reports and/or Alarm data that can be accessed by other Plixer Scrutinizer users at any time.

Workflow

From the Alarm Monitor view or Report page associated with the suspicious traffic, create a new Collection from the Manage Collections submenu (star button) and set it as the active Collection.

Tip

To use an existing Collection instead, click the star button and select the Collection from the menu.

To add an item after the active Collection has been set, click the star button from any relevant Alarm/Event information view or Report and click it a second time, after it has been replaced with a +.
Repeat the previous step to add additional items to the Collection.

All Plixer Scrutinizer users can access existing Collections via the Investigate > Collections page of the web interface. When inspecting a Collection, users can add notes to the individual items or for the Collection itself.

Hint

The default view of the Collections page displays all Collections that have been assigned to the current user. To see other Collections, switch to the Other Collections tab of the page.

Collections that are no longer relevant can be deleted by selecting them from the main Collections page and clicking the Delete button.