In the Investigation > Navigate view or Events view, you can add meta values to an existing list or create a list using the option Add/Remove from List . Related procedures are available in Manage Context Hub Lists and List Values in Investigation.
To access this dialog:
- In the Security Analytics menu, select Investigation > Navigate or Events. Both views provide access to the Add/Remove from List dialog.
- Right-click a meta value (for example, values underSource IP, Destination IP, or Username) and select Add/Remove from List in the context menu.
The following figure shows the dialog when you select Create New List.
The following table describes the features of Add/Remove from List and Create New List dialogs.