In the Investigation > Navigate view or Events view, you can add meta values to an existing list or create a list using the option Add/Remove from List . Related procedures are available in Manage Context Hub Lists and List Values in Investigation.
To access this dialog:
- In the Security Analytics menu, select Investigation > Navigate or Events. Both views provide access to the Add/Remove from List dialog.
- Right-click a meta value (for example, values underSource IP, Destination IP, or Username) and select Add/Remove from List in the context menu.
The following figure shows the dialog when you select Create New List.
The following table describes the features of Add/Remove from List and Create New List dialogs.
|Meta Value||The selected meta value to be added to the existing or new list.|
|List||The list to which the selected meta value must be added. A drop-down menu provides a list of available lists to which you can add the meta value.|
|Create New List||Opens a new dialog in which you can create a new list for the selected meta value.|
|List Name||The name of the new list.|
|Description||The description of the new list.|
|Create||Create a new list after entering the required fields.|
|Back||In the new list mode, cancels the new list creation and returns to the original dialog.|
|Cancel||Cancels the addition of the meta value to a list and closes the dialog.|
|Save||Saves the changes made to the lists and closes the dialog.|