Lookups

Administrator feature

Lookups are an administrator feature. Some users don't have access to Lookups.

You can use lookups to get and store additional information from external sources. The additional information enhances your data and adds relevant context. This makes your data more valuable because you can analyze the data more deeply. For example, you can store user names, active users, active VPNs, and suspicious IP addresses.

Tip

You can read more about Lookups here in the Reference guide.

Navigating Lookups

Creating a new lookup

To create a new lookup:

1. Click Create lookup.
2. Fill in the fields: Name, Short description, Detail description, and Key(s).
3. To add another key, click on the +.
4. Choose to add or not add an expiration.
5. Click Save.

Finding a lookup

Use the search bar to find a specific lookup. Using the search bar does not search the contents of the lookups, only the lookup names. To view all the lookups again after using the search bar, clear the search bar and press Enter or Return.

Viewing and editing a lookup's details

Viewing a lookup's keys/items

To see a lookup's keys and values, or items, click on the ... button, and click Items.

Editing a lookup's keys/items

From the List of lookups, click on the ... button and click Items. This takes you to the individual lookup's page.

Adding: To add an item, click Add item.

Editing: To edit an existing item, click the ... button on the item line, and click Edit.

Deleting: To delete the item, click the ... button on the item line, and click Delete.

Remember to click Save after making changes.

Viewing a lookup's description

To see the detailed description of a lookup, click on the ... button on the List of lookups page, and click Info.

Editing a lookup's description

1. Click on the ... button on the List of lookups page, and click Info. This takes you to the lookup's info page.
2. Click Edit lookup at the bottom.
3. After making changes, click Save, or click Cancel to exit editing mode.

Deleting a lookup

To delete a lookup:

1. Click on the ... button on the List of lookups page, and click Info. This takes you to the lookup's info page.

2. Click Delete lookup.