Adding, editing, and deleting records in the context table

To edit context table content:

1. Open the context table that you want to edit.
2. Do one of the following:
   • To add a row, click the Add button, then specify the field values and click the checkmark icon () to save your changes. The fields indicated on the Schema tab as key fields must be filled.

     KUMA takes field names from the correlation rules with which the context table is associated. These names are not editable. The list of fields cannot be edited.

     If you do not specify some of the field values, the missing fields are populated with default values. The key of the record is determined from the full set of fields, and the record is added to the table. If an identical key already exists in the table, an error is displayed.

     List of default field values

     Field type	Default value
     Integer	0
     Floating point number	0.0
     String	""
     Boolean	false
     IP address	"0.0.0.0"
     Timestamp	0
     Integer list	[]
     Float list	[]
     List of strings	[]
     Boolean list	[]
     Timestamp list	[]
     IP list	[]

   • To edit a row, in the Actions column, click the pencil icon (), then specify the field values and click the checkmark icon () to save your changes.

     The value of the key field of the record is not available for editing. You can change it by exporting and importing a record.

     The values of the Timestamp and Timestamp list fields must be greater than or equal to 0. The values of the IP address and IP address list fields must conform to the IPv4 or IPv6 format.

   • To duplicate a row, select a row and click the Duplicate button, then specify the field values and click the checkmark icon () to save your changes.
   • To delete a row, in the Actions column, click the trash can icon ().

The context table is modified.

Page top