Lookups are an administrator feature. Some users don't have access to Lookups.
You can use lookups to get and store additional information from external sources. The additional information enhances your data and adds relevant context. This makes your data more valuable because you can analyze the data more deeply. For example, you can store user names, active users, active VPNs, and suspicious IP addresses.
You can read more about Lookups here in the Reference guide.
Creating a new lookup
To create a new lookup:
- Click Create lookup.
- Fill in the fields: Name, Short description, Detail description, and Key(s).
- To add another key, click on the +.
- Choose to add or not add an expiration.
- Click Save.
Finding a lookup
Use the search bar to find a specific lookup. Using the search bar does not search the contents of the lookups, only the lookup names. To view all the lookups again after using the search bar, clear the search bar and press
Viewing and editing a lookup's details
Viewing a lookup's keys/items
To see a lookup's keys and values, or items, click on the ... button, and click Items.
Editing a lookup's keys/items
From the List of lookups, click on the ... button and click Items. This takes you to the individual lookup's page.
Adding: To add an item, click Add item.
Editing: To edit an existing item, click the ... button on the item line, and click Edit.
Deleting: To delete the item, click the ... button on the item line, and click Delete.
Remember to click Save after making changes.
Viewing a lookup's description
To see the detailed description of a lookup, click on the ... button on the List of lookups page, and click Info.
Editing a lookup's description
- Click on the ... button on the List of lookups page, and click Info. This takes you to the lookup's info page.
- Click Edit lookup at the bottom.
- After making changes, click Save, or click Cancel to exit editing mode.
Deleting a lookup
To delete a lookup:
Click on the ... button on the List of lookups page, and click Info. This takes you to the lookup's info page.
Click Delete lookup.