Types of Matchlists

There are 5 types of Matchlists:

User Matchlist

---

User matchlists let you screen events against lists of users and user data. Although no field is required, you MUST fill at least one field.

📘

The alias fields let you check a field for a second name.

If you add Fred for the First Name, and Grizzly for First Name Alias, the list will check whether either Fred or Grizzly appears in an event's first_name field. Aliases for Middle Name and Last Name work the same way.

Business Matchlist

---

Business matchlists let you screen events against lists of businesses and business data. Although no field is required, you MUST fill at least one field.

Single IP (IP_INET) Matchlist

---

To add a single IP to a matchlist, select IP_INET as the list type. Then you can add IPs and source locations.

Range of IPs (CIDR) Matchlist

---

You can also add a whole range of IP addresses to an existing matchlist. This is useful when you want to do things like check against an entire IP subnet. IP ranges are in CIDR subnet mask notation°. You may want to check this caculator° for help, or ask a developer.

String Matchlist

---

If you want to check for a word across a variety of different fields, you can upload data as a simple string. A string could be any word or collection of words.