Dear Metron community,

I think it would be useful to have a graphical interface in Metron to
manage whitelists and blacklists. This is especially useful for lists that
are small (but not small enough for the enrichment config), that might
change rather often and for testing purposes.

The existing process of uploading lists as an enrichment source to HBase is
wonderful (and absolutely required) for automation and for larger lists,
but security operators often want to manage smaller lists themselves in a
more appealing interface - especially if it's just about adding or removing
a few entries from the list at a time.

What do you think?
Would this be an appropriate addition (feature request) to the platform?

Best,
Stefan

Reply via email to