Renderers

Renderers allow you to automatically pull up additional information on Alerts. To use a Renderer, you have to first register it on an Alert field. Once you've done that, the Renderer will execute whenever you view that Alert.

Usage

To configure Renderers, you first need to be viewing an Alert. Find the field that you want to add a renderer to and click the pencil icon on the far right to pull up the config. Select a Renderer from the dropdown and hit apply.

You can save this configuration by clicking on the dropdown next to 'Add Note' and selecting from the list. Click 'Save Renderers', which will apply this configuration to all Alerts generated by the Search.

Types

IP

Display GeoIP information on a IP address.

MAC

Display vendor information on a MAC address.

Link

Turn all URLs into clickable links.

Stacktrace

Render pre-formatted content (like stack traces)