You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/detections/value-list-exceptions.asciidoc
+1Lines changed: 1 addition & 0 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -20,6 +20,7 @@ TIP: You can also use a value list as the <<indicator-value-lists,indicator matc
20
20
When you create a value list for a rule exception, be mindful of the list's size and data type. All rule types support value list exceptions, but extremely large lists or certain data types have limitations.
21
21
22
22
Custom query, machine learning, and indicator match rules support the following value list types and sizes:
23
+
23
24
* **Keywords** or **IP addresses** list types with more than 65,536 values
24
25
* **IP ranges** list type with over 200 dash notation values (for example, `127.0.0.1-127.0.0.4` is one value) or more than 65,536 CIDR notation values
0 commit comments