Skip to main content

Context ManagementContext Management Administration Guide

View and Interact with a Crowdstrike Context Table

In the Overview tab of the Context Management service, click the name of the CrowdStrike context table. The context data contained in the table is displayed. The table columns represent the context table attributes. Each row represents a context data entity.

You can interact with the context data in the CrowdStrike context table in the following ways:

  • Filter the Data – To filter the data in the context table, enter a value in the Search field at the top of the table. You can search for full or partial values from any column. The table will filter to display only the rows that match the search criteria you entered. To remove the filter, delete the search value.

  • View Attributes – To view the values for all the attributes of a single data entity, click anywhere in a specific row on the detail page. An Attributes panel opens on the right. For information about the available attributes, see Default Device Attribute Mapping for CrowdStrike.

  • Edit the Values of a Manual Record – If a specific record was entered or updated manually, it will be represented by a custom icon (icon-custom.png) in the Source column instead of the CrowdStrike icon (tile-crowdstrike.png). To edit the values of a single custom record, click the options icon (icon-options.png) on the far right side of the data row and select the Edit option. An Edit Record dialog box opens. Edit the values you want to change and click Save Edits.

  • Delete the Values of a Manual Record – If a specific record was entered or updated manually, it will be represented by a custom icon (icon-custom.png) in the Source column instead of the CrowdStrike icon (tile-crowdstrike.png). To delete a single custom record, click the options icon (icon-options.png) on the far right side of the data row and select the Delete option. When prompted, confirm the deletion.

  • Export as CSV – To export the the data from a context table, click icon-export.pngExport as CSV in the top right corner of the table. The context data is exported in a comma-separated value (CSV) format that can be downloaded. When the export is complete, you will receive a notification with a link to download the file to your local computer. The downloadable CSV file is available for seven days.

    export-notification.png

    Alternately, you can click the notifications icon (icon-notification.png) in the top right corner of any window in the New-Scale Security Operations Platform. The Your Notifications pane is displayed and you can find the download link in the notification there.

    Note

    The exported file contains all of the columns in the context table, including columns that are hidden in the display.

  • Delete the Whole Context Table – To delete the entire context table, click the delete icon (icon-delete-table.png) in the top right corner of the page. When prompted, confirm that you want to delete the table. You can opt to remove any custom attributes that are not used in another context table.

  • Add Data to the Context Table – To add additional rows of data to the context table, click the plus icon (icon-add-data.png) in the top right corner if page. You can opt to add data by uploading a CSV file or to add data manually. When added to the Okta context table, these new data rows will be represented by a custom icon (icon-custom.png) in the Source column instead of the CrowdStrike icon (tile-crowdstrike.png).