Skip to main content

Configurations > Shared Lists

Introduction to Shared Lists

The Shared Lists screen allows you to build a list of items that can be reused throughout Teramind. You can build lists of websites, IP addresses, application names, and more. These shared lists can be used when defining behavior rules, as well as in monitoring settings.

You can see all the existing lists, including their name, type, number of items in the list, etc. You can create, edit, or delete shared lists from this screen.

Types of Shared Lists

  • Text: Useful for simple data such as keywords, names, website URLs, etc. For example, “John”, “www.facebook.com”, “casino”, etc.

  • Regex (Regular Expressions): A powerful list type that can be used to detect patterns and specially formatted text such as credit card numbers, zip/postal codes, etc. For example, "[pP][aA@][sS5$][sS5$]w[oO0]{0,1}[rR][dD]" (catches leetspeak variants of "password"), "\b\d{3}-\d{2}-\d{4}\b" (a US Social Security number), "\b\d{4}[- ]?\d{4}[- ]?\d{4}[- ]?\d{4}\b" (a 16-digit credit card number), "[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+.[a-zA-Z]{2,}" (an email address). Check out the Regex Cheat Sheet in this article for more information about regular expressions.

  • Network: Allows you to enter IP addresses, with an optional subnet mask*. For example, "55.112.63.22", "55.112.63.22/32", "192.168.20.35/24", etc. Network lists can be used with the Network-based rules or to control Network monitoring settings.

*Subnet Mask

The number after the "/" symbol (e.g., “/32”, “/24”) refers to the subnet mask in CIDR notation. It's used to divide the IP address into the network and host portions. A subnet mask is used to determine which part of an IP address refers to the network and which part refers to the host. A subnet mask of /32 translates into a subnet of 255.255.255.255. This means the IP address is used by a single network/device and not a host. A subnet mask of /24 translates into a subnet of 255.255.255.0. This means the first 24 bits (255.255.255) are reserved for the network address, and the last 8 bits (.0) are reserved for the host (allowing for a maximum of 256 hosts).

Creating a New Shared List

1. Click the Create Shared List button near the top-right corner. You will be taken to the Create Shared List screen:

2. Enter a name for the list.

3. Select a list type. You can choose from Text, Regular Expressions, and Networking types. See the Types of Shared Lists section above to learn what each of these lists can contain.

4. Click the Save button to create the list. After creating the list, you can add/remove items to it, replace its items from an existing list, import items from a CSV file, etc. See the Managing Shared Lists section below to learn more.

Note that on Cloud deployments, the maximum number of items allowed in a Shared List is 32,000.

Managing Shared Lists

Click the Three Dots icon in front of a list to access its Context Menu:

Select View Shared List to open the shared list for viewing/editing. Note that you can also click the list’s name to open.

Select View Shared List in a New Tab to view/edit the list in a new browser tab.

Select Download to download the list as a CSV file.

Select Rename Shared List to rename it.

Select Import Shared List Items to import items from a CSV file.

Select Replace Shared List to replace it with another list.

Select Remove Shared List to permanently delete it.

Viewing/Editing a Shared List

1. List name: Allows you to edit the list’s name.

2. Referenced by: Badges below the header show which entities (for example, behavior policies and rules) use the list, with a count for each. If the usage information cannot be loaded, an error message is shown instead.

3. Search for keyword: Enter keywords to filter the items shown in the table.

4. Add list item: Click this button to open the Add list item window:

a. Type or paste the values into the List items box, one value per line. Each line is validated against the list type:

  • Text: enter any text value.

  • Regex: enter a valid regular expression.

  • Network: enter a valid IP address, optionally with a CIDR mask (for example, 192.168.1.0/24).

The counter below the box updates as you type: showing how many new, existing and rejected values are detected. Values that already exist in the list are counted as already present and are not added again. Invalid lines are counted as rejected and reported. In the Regex list example above, the two invalid (rejected) items are highlighted in red.

b. Click the Add N values to add the new values.

5. Import CSV: Click this button to import list items from a CSV file. It will open the Import Shared list items window:

a. Enable the Replace the existing values option to clear the list before inserting the file's values; leave it unchecked to add/append the file's values to the existing ones.

b. Click Select file and choose the file. The import starts as soon as the file is selected; when it finishes you will see an "Items have been imported successfully" confirmation.

Import File Restrictions

  • The file must contain one value per line. Blank lines are skipped and rejected values are reported.

  • The file is split on line breaks only - a comma is treated as part of a value, never as a separator, and no header row is removed (a header line counts as a value).

  • Maximum supported file size is 100 KB.

6. List Context Menu: Click the Three Dots to open the list context menu. Currently it has only one option: Download as file. Select this option to download the list as a CSV file.

7. Item Row Context Menu: Click the Three Dots at the end of an item row to open its context menu. From the menu, select Edit to change the value inline. Click Remove to delete the item from the list.

8. Edit an Item: While editing an item, click the Tick Mark to save the item. If you want to discard your changes without saving, click the X.

Importing Shared List Items

It works similar to the Import CSV button on the Edit shared list screen (above).

Replacing a Shared List with Another Shared List

To replace the items of a shared list from another list click the Three Dots icon in front of a list to access its Context Menu. Then select the Replace Shared List option. A window will pop up:

1. In the Replace with dropdown, choose the source list. Only lists of the same type are offered. The source list's content replaces the current list's content. The source list itself is not changed.

2. Click Replace Shared List to confirm.

Did this answer your question?