This action type can be used to add a constant value or the value of an event attribute (such as Destination IP or Source User Name) from an existing Dynamic List. The various parameters available are:
Element Values Enter a constant value here.
Dynamic List Name Choose an existing Dynamic List from the dropdown menu.
Attribute Names For every event that is part of a correlated event, the value or values of this event attribute will be deleted from the Dynamic List.