- Introduction to Context Management
- Onboarding a Context Table
- Custom Context Tables
- Create a Custom Context Table by Importing a CSV File
- Create a Custom Context Table Using the Add Custom Option
- Working with Filtered Context Tables
- View and Interact with a Custom or Filtered Context Table
- View the Details Panel for a Custom or Filtered Context Table
- Edit the Configuration of Custom or Filtered Context Tables
- Active Directory Context Tables
- Prerequisites to Onboard an Active Directory Context Table
- Create an Active Directory Context Table
- View and Interact with an Active Directory Context Table
- View the Details Panel for an Active Directory Context Table
- Edit the Configuration of an Active Directory Context Table
- Default Active Directory Attribute Mapping
- Microsoft Entra ID Context Tables
- Prerequisites to Onboard a Microsoft Entra ID Context Table
- Create a Microsoft Entra ID Context Table
- View and Interact with a Microsoft Entra ID Context Table
- View the Details Panel for a Microsoft Entra ID Context Table
- Edit the Configuration of a Microsoft Entra ID Context Table
- Default Microsoft Entra ID Attribute Mapping
- Okta Context Tables
- Custom Context Tables
- Add Data to an Existing Context Table
- Using Context Data in Downstream Applications
- Built-In Threat Intelligence Context Tables
- Context Management APIs
- Troubleshooting Context Management
View and Interact with a Microsoft Entra ID Context Table
In the Overview tab of the Context Management service, click the name of a specific Microsoft Entra ID context table. The context data contained in the table is displayed. The table columns represent the context table attributes. Each row represents a context data entity.
You can interact with the context data in a Microsoft Entra ID context table in the following ways:
Filter the Data – To filter the data in the context table, enter a value in the Search field at the top of the table. You can search for full or partial values from any column. The table will filter to display only the rows that match the search criteria you entered. To remove the filter, delete the search value.
View Attributes – To view the values for all the attributes of a single data entity, click anywhere in a specific row on the detail page. An Attributes panel opens on the right.
Edit the Values of a Manual Record – If a specific record was entered or updated manually, it will be represented by a custom icon (
) in the Source column instead of the Microsoft Entra ID icon (
). To edit the values of a single custom record, click the options icon (
) on the far right side of the data row and select the Edit option. An Edit Record dialog box opens. Edit the values you want to change and click Save Edits.Delete the Values of a Manual Record – If a specific record was entered or updated manually, it will be represented by a custom icon (
) in the Source column instead of the Microsoft Entra ID icon (). To delete a single custom record, click the options icon () on the far right side of the data row and select the Delete option. When prompted, confirm the deletion.Manage Columns – To configure which of the available attribute columns are displayed and in what order, click
Manage Columns in the top right corner of the table. A dialog box opens where you can configure the column display as follows:Remove a column – In the In Use panel, either click the minus icon (
) or click and drag an attribute to the Available panel.Add a column – In the Available panel, either click the plus icon (
) or click and drag an attribute to the In Use panel.
When you're satisfied with the column configuration, click Apply. The changes to the column display are saved.
Note
If you remove a column from the display, context table records can no longer be filtered based on values found in that column.
Export as CSV – To export the the data from a context table, click
Export as CSV in the top right corner of the table. The context data is exported in a comma-separated value (CSV) format that can be downloaded. When the export is complete, you will receive a notification with a link to download the file to your local computer. The downloadable CSV file is available for seven days.
Alternately, you can click the notifications icon (
) in the top right corner of any window in the Exabeam Security Operations Platform. The Your Notifications pane is displayed and you can find the download link in the notification there.Note
The exported file contains all of the columns in the context table, including columns that are hidden in the display.
Delete the Whole Context Table – To delete the entire context table, click the delete icon (
) in the top right corner of the page. When prompted, confirm that you want to delete the table. You can opt to remove any custom attributes that are not used in another context table.Edit the Configuration of the Context Table – To make changes to the attributes of a context table, click the edit icon (
) in the top right corner of the page. A Configuration panel opens on the right. For more information, see Edit the Configuration of a Microsoft Entra ID Context Table.Add Data to the Context Table – To add additional rows of data to the context table, click the plus icon (
) in the top right corner if page. You can opt to add data by uploading a CSV file or to add data manually. When added to the Microsoft Entra ID context table, these new data rows will be represented by a custom icon () in the Source column instead of the Microsoft Entra ID icon ().