Lists

Use the Lists page to create and manage a list of string values you want to easily reuse when searching for events or when defining datasets and policies. The table displays all the configured lists. You can click on a row to modify a list.

Configuring a new list

1. Click Add New List.
2. Enter a name for the list.
3. Enter the string values in the text box. Or import a list from a text file.
4. Click Save to finish creating the list.

Events are associated with the new list after it has been saved and applied in a dataset or policy.

The table also displays the number of policies and datasets where the list is being used.

NOTE

Cyberhaven has a limit of 500K entries for all lists combined.

Importing and exporting lists

You can import a text file into a new list, include it within an existing list, and export your existing lists as a text file.

When you add a new list or select an existing list, the list details are displayed on the right pane.

Click on the Actions drop-down menu to select import or export options.

Viewing list usage

1. Click on the number in the Where Used column. A drop-down menu is displayed.
2. Click on a dataset or policy to go to the specific dataset or policy from the drop-down menu.

Deleting a list

To delete a list, click on the kebab menu in the table row and click Delete. Only unused lists can be deleted.