View and manage sources

To filter the sources displayed on the page, click Filter (). For more information, refer to Filter Threat Intelligence Director data in table views.

To view detailed ingestion status, hover the cursor over the text in the Status column. For more information, refer to Source status details.

To edit the Action setting, refer to Edit Threat Intelligence Director actions at the source, indicator, or observable Level. If an action is fixed, it is the only supported action for the source Type.

To edit the Publish setting, click Slider (). For more information, refer to Pause or publish Threat Intelligence Director data at the source, indicator, or observable Level.

To pause or resume Threat Intelligence Director updating the source, click Pause Updates or Resume Updates. If you pause updates, updating is paused but existing indicators and observables remain in TID.

To delete the source, click Delete (). The Delete option is unavailable if the source is still processing. Removing a source removes all indicators associated with that source. Associated observables may also be deleted; they are retained if they are associated with indicators remaining in the system.