Skip to content

Commit

Permalink
[Serverless] Fixes refs in the value list docs (#348)
Browse files Browse the repository at this point in the history
* Fixed links

* First draft

* Adding's ben's input
  • Loading branch information
nastasha-solomon committed May 19, 2024
1 parent 78e7565 commit 035d123
Showing 1 changed file with 7 additions and 3 deletions.
10 changes: 7 additions & 3 deletions docs/rules/value-lists-exceptions.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -61,12 +61,14 @@ To create a value list:
If you import a file with a name that already exists, a new list is not created. The imported values are added to the existing list instead.
</DocCallOut>

<div id="edit-value-lists"></div>
<div id="manage-value-lists"></div>

## Manage value lists

You can edit, remove, or export existing value lists.

<div id="edit-value-lists"></div>

### Edit value lists

1. Go to **Rules****Detection rules (SIEM)**.
Expand All @@ -75,18 +77,20 @@ You can edit, remove, or export existing value lists.
1. Do any of the following:
* **Filter items in the list**: Use the KQL search bar to find values in the list. Depending on your list's type, you can filter by the `keyword`, `ip_range`, `ip`, or `text` fields. For example, to filter by Gmail addresses in a value list of the `keyword` type, enter `keyword:*gmail.com` into the search bar.

You can also filter by the `updated_by` (for example, `updated_by:testuser`), or `updated at` (for example, `updated_at < now`) fields.
You can also filter by the `updated_by` field (for example, `updated_by:testuser`), or the `updated at` field (for example, `updated_at < now`).
* **Add individual items to the list**: Click **Create list item**, enter a value, then click **Add list item**.
* **Bulk upload list items**: Drag or select the `csv` or `txt` file that contains the values that you want to add, then click **Upload**.
* **Edit a value**: In the Value column, go to the value you want to edit and click the **Edit** button (<DocIcon type="pencil" title="Edit" />). When you're done editing, click the **Save** button (<DocIcon type="check" title="Save" />) to save your changes. Click the **Cancel** button (<DocIcon type="cross" title="Edit" />) to revert your changes.
* **Remove a value**: Click the **Remove value list** button (<DocIcon type="trash" title="Remove value list" />) to delete a value from the list.
* **Remove a value**: Click the **Remove value** button (<DocIcon type="trash" title="Remove value list" />) to delete a value from the list.

<DocImage size="xl" url="../images/value-lists-exceptions/-detections-edit-value-lists.png" alt="Manage items in a value list" />

<DocCallOut title="Tip">
You can also edit value lists while creating and managing exceptions that use value lists.
</DocCallOut>

<div id="export-remove-value-lists"></div>

### Export or remove value lists

1. Go to **Rules****Detection rules (SIEM)**.
Expand Down

0 comments on commit 035d123

Please sign in to comment.