Active List Overview

The ArcSight Platform includes a subset of the functionality that is available for active lists and rules in the ArcSight Command Center.

Active lists allow you to track traffic with IP addresses of interest. While you can manually update active lists, their real value comes when you define them in conjunction with rules specifically tailored to interact with and populate the lists dynamically. Lists that are not rule-driven are empty or contain only manual entries that have not timed out.

• Create, edit, and delete active lists

• Create and delete rules