- Introduction to Context Management
- Onboarding a Context Table
- Custom Context Tables
- Create a Custom Context Table by Importing a CSV File
- Create a Custom Context Table Using the Add Custom Option
- Working with Filtered Context Tables
- View and Interact with a Custom or Filtered Context Table
- View the Details Panel for a Custom or Filtered Context Table
- Edit the Configuration of Custom or Filtered Context Tables
- Active Directory Context Tables
- Prerequisites to Onboard an Active Directory Context Table
- Create an Active Directory Context Table
- View and Interact with an Active Directory Context Table
- View the Details Panel for an Active Directory Context Table
- Edit the Configuration of an Active Directory Context Table
- Default Active Directory Attribute Mapping
- Microsoft Entra ID Context Tables
- Prerequisites to Onboard a Microsoft Entra ID Context Table
- Create a Microsoft Entra ID Context Table
- View and Interact with a Microsoft Entra ID Context Table
- View the Details Panel for a Microsoft Entra ID Context Table
- Edit the Configuration of a Microsoft Entra ID Context Table
- Default Microsoft Entra ID Attribute Mapping
- Okta Context Tables
- Custom Context Tables
- Add Data to an Existing Context Table
- Using Context Data in Downstream Applications
- Built-In Threat Intelligence Context Tables
- Context Management APIs
- Troubleshooting Context Management
Create a Custom Context Table by Importing a CSV File
The Import CSV option is designed to streamline the process of creating a new custom context table by uploading data in a CSV file. When using this option, available on the Context Library tab, creating a custom table and uploading data are all part of a single procedure.
If you prefer more flexibility when creating a custom context table, or want to upload data manually, use the Add Custom option on the Context Library tab instead.
Note
A total of 200 custom context tables can be created.
A custom context table can contain up to a maximum of 500,000 records.
Prepare a CSV File
Before you can create a custom table by importing a CSV file, you must first prepare a CSV file that conforms to the following requirements:
It must be a maximum file size of 300 MB. If the CSV file is larger than 300 MB, compress it as a ZIP file. A compressed ZIP file must contain only one CSV file.
It must include a header row.
Note
A header row with column names is mandatory when uploading a CSV file. Failure to include a header row in the CSV file can result in missing or incorrect data in your context table.
For attributes that represent a list of values, the values must be provided in one of the following ways in the CSV file:
Escape the comma between values by preceding it with a backslash, as in this list:
[email protected]\,[email protected]\,[email protected]Enclose the entire list of values in quotes, as in this list:
"[email protected],[email protected],[email protected]"
Note
List of attributes that can be included in a custom context table:
Direct Reports
Email Addresses
Group Name
Phone Number
Create a Table with a CSV File
To create a new custom context table by importing a CSV file:
Log into the Exabeam Security Operations Platform with your registered credentials.
Find the Security Management tab and click the Context Management tile.
Navigate to the Context Library tab and click Import CSV. The Import CSV dialog box opens.
On the left side of the dialog box, provide the following information:
Context Table Name – Enter a name for the new custom context table.
Context Table Type – Select the type of context data the new table will contain. Options include Other and User.
Automatically create attributes – Select the check box if you want to use the CSV column header names to automatically create custom attributes in the new context table.
Click Select File and select a CSV file to upload. Ensure that the file conforms to the requirements described in Prepare a CSV File.
Click Review Mapping. A table is displayed listing the columns contained in the CSV file.
In the Target row of the table, click Add Attribute for each CSV column, and do one of the following:
Note
If you chose to have custom attributes created automatically from your CSV column headings (in Step 4), and those custom attributes do not duplicate an existing attribute, you can skip this step and continue with Step 8. However, if any of the automatically created attributes is a duplicate of an existing attribute, you will need to select the existing attribute from the list in the Target row of the table.
Select one of the available attributes to map it to the CSV column
Note
You cannot include the following attributes in a custom context table: Thumbnail Photo, User Account Control.
Click Add Custom Attribute, enter a new attribute name, and click the plus icon (
) to add it as an attribute mapped to a CSV column.
In the Primary Key row of the table, click the radio button for one of the attributes to designate it as the key for the context table.
Note
You cannot designate one of the list attributes as the key for the context table:
Direct Reports
Email Addresses
Group Name
Phone Number
Click Create context table. The CSV data is uploaded to the new context table.
Click View Your Table to open the new context table and view the uploaded data.