[Feat] Add possibility to create a user customized whitelist

[8ear]

Why: Why you want the feature

The user can have another opinion as the source and does not want the IoC in his search.

What: What you want to happen

The user requires an option to add and delete attributes to an whitelist which are excluded from the splunk searches. It is independent if there is a new update or not.
This whitelist can be at the poisition of the datamodel or at the splunk search this is not important. The results is the main goal.

How: How it is implemented

• Task 1