IBM Support

QRadar Open Mic #27: Let's talk about QRadar Custom Properties - Wed, 29 Nov 2017 (Replay available)

Webcasts


Abstract

Members of the IBM Security QRadar Support and Development teams hosted an Open Mic Webcast on Wednesday, 29 November 2017 to discuss QRadar Custom Properties. After the presentation, attendees were given an opportunity to ask the panel of experts questions.

Content

At this Open Mic session on Wednesday, 29 November 2017, members of the IBM Security QRadar Support and Development teams provided a detailed discussion about how custom properties work and how administrators can leverage these values in QRadar. The session covered how custom event, flow and asset properties work, how indexes are related, optimization and more. Best practices and upcoming features, such as AQL custom properties, and json ingestion were also discussed.

Throughout the event, attendees were encouraged ask questions in the Q&A panel of the online meeting.


Presentation
OpenMic_CustomProperties.pdfOpenMic_CustomProperties.pdf


Video Replay
A recording of the session is available on the IBM Security QRadar Open Mic playlist on the IBM Security Support YouTube channel.

QRadar Open Mic #27 Replay: QRadar Custom Properties (29 Nov 2017)


How to ask follow up questions
To ask a follow up question, please use the Community questions and discussion option near the bottom of this page. 


About Open Mic Webcasts
IBM Security Systems Support wants to help you take full advantage of your products. Join us for our Open Mic Webcast series as technical experts share their knowledge and answer your questions. These webcasts are designed to address specific topics and provide an in-depth and focused technical exchange in a convenient online webcast format.

To receive notifications for QRadar Newsletters, Open Mics and other technical content, opt-in by subscribing to IBM My Notifications, selecting QRadar SIEM as your product, and selecting the "News" and "Webcast" content types when the list of content types displays.



Follow IBM Security Support on Twitter
Like IBM Security Support on Facebook.

[{"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"Not Applicable","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"7.2;7.3","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Document Information

Modified date:
17 June 2018

UID

swg27050520