Skip to content

Commit

Permalink
Fix match list link (SumoLogic#3169)
Browse files Browse the repository at this point in the history
  • Loading branch information
jpipkin1 authored Oct 4, 2023
1 parent bbf4d83 commit 80b3000
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion docs/cse/match-lists-suppressed-lists/create-match-list.md
Original file line number Diff line number Diff line change
Expand Up @@ -28,7 +28,7 @@ Note that the Match List has a **Target Column**, which you define when you crea

Many of CSE’s built-in rules assume the existence of one or more standard Match Lists. A standard Match List is a list that you need to create and populate so that CSE can leverage it. CSE rules take advantage of about 20 standard Match Lists. One example of a standard Match list is the “vuln_scanners” list mentioned in the previous section. There are analogous Match Lists for other entity types, such as “business_ips”, “verified_domains”, and so on.

When you create the standard Match Lists, it’s important to create them correctly: you need to use the exact name CSE has defined for the list, and you must specify the correct Target Column.  Y/docs/cse/match-lists-suppressed-lists/standard-match-lists/standard-match-lists) topic, which also lists the built-in rules that refer to Match List data.
When you create the standard Match Lists, it’s important to create them correctly: you need to use the exact name CSE has defined for the list, and you must specify the correct Target Column. You can find that information in the [Standard Match Lists](/docs/cse/match-lists-suppressed-lists/standard-match-lists/#standard-match-lists) topic, which also lists the built-in rules that refer to Match List data.

If you don’t define one or more standard Match Lists, the rules that refer to the match list data will still function, but you’ll miss out on the benefit that Match Lists provide—a rule will have no way of knowing that a particular IP address, domain, or other entity in a message should not cause it to fire.

Expand Down

0 comments on commit 80b3000

Please sign in to comment.