Enabling indexes to improve performance

To improve the performance of your IBM® QRadar® User Behavior Analytics (UBA) app, enable indexes in IBM QRadar.

About this task

To improve the speed of searches in IBM QRadar and the UBA app, narrow the overall data by adding the following indexed fields to your search query:
  • High Level Category
  • Low Level Category
  • senseValue
  • senseOverallScore
  • Username

For more information about indexing, see Index management.

Procedure

  1. On the navigation menu ( Navigation menu icon ), click Admin.
  2. In the System Configuration section, click the Index Management icon.
  3. On the Index Management page, in the search box, enter High Level Category.
  4. Select High Level Category and then click Enable Index.
    High Level Category Index screen
  5. Click Save.
  6. Select Low Level Category and then click Enable Index.
    Low Level Category Index screen
  7. Click Save.
  8. On the Index Management page, in the search box, enter sense.
  9. Select senseValue and senseOverallScore and then click Enable Index.
    Sense Value Index screen
  10. Click Save.
  11. On the Index Management page, in the search box, enter username.
  12. Select Username and then click Enable Index.
    Username Index screen
  13. Click Save.