Would you see this utilized exclusively for test purposes, or should we look at this as a general feature req to expose our enrichment loading in the UI? To that end, does it make sense to make this broader than whitelists and blacklists?
On Thu, Dec 20, 2018 at 2:30 AM Stefan Kupstaitis-Dunkler < [email protected]> wrote: > Dear Metron community, > > I think it would be useful to have a graphical interface in Metron to > manage whitelists and blacklists. This is especially useful for lists that > are small (but not small enough for the enrichment config), that might > change rather often and for testing purposes. > > The existing process of uploading lists as an enrichment source to HBase > is wonderful (and absolutely required) for automation and for larger lists, > but security operators often want to manage smaller lists themselves in a > more appealing interface - especially if it's just about adding or removing > a few entries from the list at a time. > > What do you think? > Would this be an appropriate addition (feature request) to the platform? > > Best, > Stefan > >
