Step 10 (optional). Enabling the indexes of the added custom event properties

27 February 2024

ID 173842

We recommend that you enable the indexes of the added custom event properties. This will increase the performance of Kaspersky Threat Feed App.

To enable the indexes of the added custom event properties:

  1. In QRadar, select Admin and under System Configuration select Index Management.

    Admin tab in QRadar. Index Management icon.

    Admin tab of QRadar Console (system configuration tools)

    The Index Management window opens.

  2. Optionally, specify the filter to find the added properties.
  3. Select one or several table rows, and click Enable Index.
  4. Click Save.

    A message box appears that asks you whether you want to save the changes you made.

    Confirmation window in QRadar.

    Saving changes to the indexes

  5. Click OK to save changes to the properties.

Did you find this article helpful?
What can we do better?
Thank you for your feedback! You're helping us improve.
Thank you for your feedback! You're helping us improve.