When you open the Settings -> Alerts & Incidents -> Buckets page in the Logsign Unified SecOps Platform web interface, you see the lists (buckets) that come installed by default with the Logsign Unified SecOps Platform product. These lists can be configured with the help of the log data from the sources that you have attached. Arranging the default lists according to your own system will increase the efficiency you get from the Logsign Unified SecOps Platform application.
You can click the + Bucket button on the right side of the page, below the search box, to create a new list.