# Lists

**URL:** <https://discuss.elastic.co/t/lists/188163>\
**Category:** SIEM\
**Created:** [June 30, 2019, 1:37am UTC](https://discuss.elastic.co/t/lists/188163 "2019-06-30T01:37:41Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![anon15412260](https://avatars.discourse-cdn.com/v4/letter/a/dbc845/32.png) [@anon15412260](https://discuss.elastic.co/u/anon15412260)\
**Post date:** [June 30, 2019, 1:37am UTC](https://discuss.elastic.co/t/lists/188163/1 "2019-06-30T01:37:41Z")

</div>

Would be neat if this SIEM module allowed for users to build out lists to add/remove/modify entries so easily query and alert on items. For instance when searching, users could add users/ips/urls to a known bad list for reference/lookups later. These lists could be references/used within dashboards/queries/alerts

---

<div class="post-metadata">

**Author:** ![tudor](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tudor/32/3753_2.png) [@tudor](https://discuss.elastic.co/u/tudor)\
**Post date:** [July 1, 2019, 10:30am UTC](https://discuss.elastic.co/t/lists/188163/2 "2019-07-01T10:30:19Z")

</div>

Thanks for the interest, indeed this is something that we discussed and we'd like to implement. Lists of hosts, IPs, URLs, users would all be of interest, right? Anything other entity type?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 29, 2019, 10:30am UTC](https://discuss.elastic.co/t/lists/188163/3 "2019-07-29T10:30:28Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.