List

Create a new list for the first time

Create a list

Since the plugin version in 3.1.0 a new feature "List" is available. To use it, you should follow the following steps

1. select Wizard>List in the main menu
2. clic on the green button Create and fill your first list
3. validate your page when finished

Activate the lookup (needed for the first list)

Your first list is now created, but you still need few extra steps to made it available in Alert rules wizard.

1. You need to go to the Lookup Tables page (System>Lookup Tables)
2. Select the Data adapters sub page (clic on the Data Adapters blue button)
3. Clic on the Wizard data adapter "Edit" action
4. Scroll to the HTTP Headers section
5. The field "Name" should be filled by "Authorization"
6. The field "Value" should be filled by "Basic" followed by "user:password" in base64 for example "Basic TXlVc2Vy0k15UGFzc3dvcmQK" where TXlVc2Vy0k15UGFzc3dvcmQK is the result of "echo -n 'MyUser:MyPassword'|base64"
7. Clic on the green "Add" button to add (or update the old) your new entry
8. Clic on the green "Upadate Adapter" button to finalize your configuration
9. MyUser must be a user with admin rights which should have been created before

IF you do not know how to create a new user with admin role, please go to How to create a new user (Graylog Official Doc)

Use the list in the Wizard