Allow to insert list of values to active list by a rule or trend action
Starting from ESM version 6x the new data type "List" was added.
For example, I have some events with comma separated values in the field and I can convert these values to variable with "list" type. So, it would be great to have possibility to add this variable with "list" type into Active List within one action.
There are two basic scenarios for this:
- Add this variable (with list of values) into active list with only one column.
- Add this variable (with list of values) with another variable or field (with one value) into multi mapped active list with only two columns, where variable/field (with one value) should be mapped in key value column and variable (with list of values) should be mapped in non-key value column.
Overall, it would help to add comma separated values from one event to active list.
Because it is impossible for now.