How to make global variable to active list field
I have an active list named as 'Malicious IP'. It is having two fields
1. IP (Malicious IP)
2. Tags (Like Spam, exploit, etc)
I am matching this IP Field with firewall data (To know malicious communication) and when a match is happening, I am storing it into another active list name as 'malicious communication'. Everything is happening but issue is that I am not able to store respective Tags value of malicious IP from 'Malicious IP ' active list to 'malicious communication' List.
It can be possible if I can make first active list field as global field.
Request help and suggestion to perform this task.
Re: How to make global variable to active list field
You are using rule to populate the second active list "malicious communication". Now, if you also want to populate the second field (Tags) via rule trigger, that field has to be part of the event by which rule is triggering.