The Correlation rules in solution packs require some data in the Dynamic Lists for it to work properly. The solution pack framework includes the ability to automatically populate the Dynamic Lists with data when you install a solution pack.
To populate a Dynamic List when you install a solution pack:
Create a text file with the values you want to add to the Dynamic List. Add each different value on a separate line.
In the Solution Designer, expand the Correlation content, and then select the Dynamic List.
Click Add a new attachment in the Attachment panel, and attach the file that you created in Step 1.
All the list items in the Dynamic List never expire. For more information, see Configuring Dynamic Lists
in the Sentinel User Guide.