In the Investigation > Navigate view or Events view, you can add meta values to an existing list or create a list using the option Add/Remove from List . Related procedures are available in Manage Context Hub Lists and List Values in Investigation.
To access this dialog:
- In the Security Analytics menu, select Investigation > Navigate or Events. Both views provide access to the Add/Remove from List dialog.
- Right-click a meta value (for example, values underSource IP, Destination IP, or Username) and select Add/Remove from List in the context menu.
The following figure is an example of the dialog when initially opened.
The following figure shows the dialog when you select Create New List.
Features
The following table describes the features of Add/Remove from List and Create New List dialogs.
| Feature | Description |
|---|---|
| Meta Value | The selected meta value to be added to the existing or new list. |
| List | The list to which the selected meta value must be added. A drop-down menu provides a list of available lists to which you can add the meta value. |
| Create New List | Opens a new dialog in which you can create a new list for the selected meta value. |
| List Name | The name of the new list. |
| Description | The description of the new list. |
| Create | Create a new list after entering the required fields. |
| Back | In the new list mode, cancels the new list creation and returns to the original dialog. |
| Cancel | Cancels the addition of the meta value to a list and closes the dialog. |
| Save | Saves the changes made to the lists and closes the dialog. |