The lookup list feature allows you to create a list of values for reuse across different rules. After you create a lookup list and give it a variable name, you can insert it in rule filters and suppressions using the following format: @<variablename>. Example: @DeactivatedUsers.
When you modify the list in one location, those changes apply to all rules using that specific list. You can create lookup lists that are specific to your organization and/or use Distributed Cloud AIP's centrally managed lookup lists.
NOTE
This feature is only supported in the Distributed Cloud AIP API at this time. Functionality within the Distributed Cloud AIP user interface (UI) will be added in the near future.
This method enables you to view all lookup lists that are available to you.
https://api.threatstack.com/v2/lookup-lists
OK
Bad parameters
Unauthorized response
The resource was not found
Rate limit hit
An internal error has occurred
{- "id": "4eb0dccf-97a5-4161-ad6f-1c228f85857b",
- "managed": true,
- "displayName": "string",
- "description": "string",
- "variableName": "_my_Var5",
- "values": [
- {
- "id": "4eb0dccf-97a5-4161-ad6f-1c228f85857b",
- "value": true
}
], - "createdAt": "2019-08-24T14:15:22Z",
- "updatedAt": "2019-08-24T14:15:22Z"
}This method enables you to create a new lookup list.
NOTE
List values are optional.
https://api.threatstack.com/v2/lookup-lists
Created
Bad parameters
Unauthorized response
The resource was not found
Rate limit hit
An internal error has occurred
{- "displayName": "string",
- "description": "string",
- "variableName": "_my_Var5",
- "values": [
- true
]
}{- "id": "4eb0dccf-97a5-4161-ad6f-1c228f85857b",
- "managed": true,
- "displayName": "string",
- "description": "string",
- "variableName": "_my_Var5",
- "values": [
- {
- "id": "4eb0dccf-97a5-4161-ad6f-1c228f85857b",
- "value": true
}
], - "createdAt": "2019-08-24T14:15:22Z",
- "updatedAt": "2019-08-24T14:15:22Z"
}This method enables you to get a specific lookup list by the list's ID.
https://api.threatstack.com/v2/lookup-lists/4eb0dccf-97a5-4161-ad6f-1c228f85857b
OK
Bad parameters
Unauthorized response
The resource was not found
Rate limit hit
An internal error has occurred
{- "id": "4eb0dccf-97a5-4161-ad6f-1c228f85857b",
- "managed": true,
- "displayName": "string",
- "description": "string",
- "variableName": "_my_Var5",
- "values": [
- {
- "id": "4eb0dccf-97a5-4161-ad6f-1c228f85857b",
- "value": true
}
], - "createdAt": "2019-08-24T14:15:22Z",
- "updatedAt": "2019-08-24T14:15:22Z"
}This method enables you to update an existing lookup list in your environment.
https://api.threatstack.com/v2/lookup-lists/4eb0dccf-97a5-4161-ad6f-1c228f85857b
The 404 error code means that the lookup list does not exist.
OK
Bad parameters
Unauthorized response
The resource was not found
Rate limit hit
An internal error has occurred
{- "displayName": "string",
- "description": "string"
}{- "id": "4eb0dccf-97a5-4161-ad6f-1c228f85857b",
- "managed": true,
- "displayName": "string",
- "description": "string",
- "variableName": "_my_Var5",
- "values": [
- {
- "id": "4eb0dccf-97a5-4161-ad6f-1c228f85857b",
- "value": true
}
], - "createdAt": "2019-08-24T14:15:22Z",
- "updatedAt": "2019-08-24T14:15:22Z"
}This method enables you to delete a lookup list.
https://api.threatstack.com/v3/lookup-lists/e5034ccf-bf8e-4005-b942-737deaf4c491
The 404 error code means the lookup list does not exist.
Resource successfully deleted
Bad parameters
Unauthorized response
The resource was not found
Rate limit hit
An internal error has occurred
{- "message": "string"
}This method enables you to update a lookup list by overwriting existing values in the list.
NOTE
If you are adding or removing single values, Distributed Cloud AIP recommends using the append and edit/delete by ID methods instead.
https://api.threatstack.com/v2/lookup-lists/4eb0dccf-97a5-4161-ad6f-1c228f85857b/values
The 404 error code means that the lookup list does not exist.
OK
Bad parameters
Unauthorized response
The resource was not found
Rate limit hit
An internal error has occurred
[- true
]{- "id": "4eb0dccf-97a5-4161-ad6f-1c228f85857b",
- "managed": true,
- "displayName": "string",
- "description": "string",
- "variableName": "_my_Var5",
- "values": [
- {
- "id": "4eb0dccf-97a5-4161-ad6f-1c228f85857b",
- "value": true
}
], - "createdAt": "2019-08-24T14:15:22Z",
- "updatedAt": "2019-08-24T14:15:22Z"
}