- Introduction to Context Management
- Onboarding a Context Table
- Custom Context Tables
- Create a Custom Context Table by Importing a CSV File
- Create a Custom Context Table Using the Add Custom Option
- Working with Filtered Context Tables
- View and Interact with a Custom or Filtered Context Table
- View the Details Panel for a Custom or Filtered Context Table
- Edit the Configuration of Custom or Filtered Context Tables
- Active Directory Context Tables
- Prerequisites to Onboard an Active Directory Context Table
- Create an Active Directory Context Table
- View and Interact with an Active Directory Context Table
- View the Details Panel for an Active Directory Context Table
- Edit the Configuration of an Active Directory Context Table
- Default Active Directory Attribute Mapping
- Microsoft Entra ID Context Tables
- Prerequisites to Onboard a Microsoft Entra ID Context Table
- Create a Microsoft Entra ID Context Table
- View and Interact with a Microsoft Entra ID Context Table
- View the Details Panel for a Microsoft Entra ID Context Table
- Edit the Configuration of a Microsoft Entra ID Context Table
- Default Microsoft Entra ID Attribute Mapping
- Okta Context Tables
- Custom Context Tables
- Add Data to an Existing Context Table
- Using Context Data in Downstream Applications
- Built-In Threat Intelligence Context Tables
- Context Management APIs
- Troubleshooting Context Management
Navigating the Context Management User Interface
The Context Management service includes two tabs, Overview and Context Library. The functionality available from each tab is described below.
Overview Tab
This tab lists all of the context tables that have been configured in your environment. For each context table, the following information is displayed:
Column | Description |
|---|---|
Source | Includes both the name of the context table and the vendor from which it is sourced. Tables that you create yourself are labeled custom. |
Context Type | The category of context data provided by the source. |
#Items | The number of records the context table contains. |
Last Updated | How long ago records were fetched from the source. |
Status | Indicates whether the table is healthy, has an error, is running, or is stopped. |
On the Overview tab, you can take the following actions to interact with the context tables:
Filter the list of tables by vendor, by context type, or by status.
Use the Search field at the top of the page to navigate to a specific table.
Click the name of a specific table in the list to open a detail page and display the data the table contains.
Click the Options icon (
) to the right of a specific table and select Details to view status and attribute information for the table. Click the Options icon (
) to the right of a specific table and select Edit to configure table attributes. Click the Options icon (
) to the right of a specific table and select Delete to remove the table. You can opt to delete any custom attributes from the selected table that are not used in other context tables.Click the Options icon (
) to the right of a specific table and select Export to export the context table data. The context data is exported in a comma-separated value (CSV) format that can be downloaded. When the export is complete, you will receive a notification with a link to download the file to your local computer. 
Alternately, you can click the notifications icon (
) in the top right corner of any window in the Exabeam Security Operations Platform. The Your Notifications pane is displayed and you can find the download link in the notification there.Note
The exported file contains all of the columns in the context table, including columns that are hidden in the display.
Click New Context Table to navigate to the Context Library tab where you can create a new context table.
Context Library Tab
On this tab you can create context tables and configure them.
The Context Library tab includes the following options for creating new tables:
Active Directory – Use this option to create and configure new Active Directory context tables.
Microsoft Entra ID – Use this option to create and configure new Microsoft Entra ID context tables.
Okta – Use this option to create and configure new Okta context tables.
Add Custom – Use this option to create and configure a new custom context table. This option provides the full range of custom creation and configuration procedures.
Import CSV – Use this option to create a new custom context table by importing data in a comma-separated values (CSV) file. This option streamlines the creation process to facilitate immediate CSV file uploading.