Advanced Configuration

The advanced and optional configurations provide additional benefits while using Qualys VM for QRadar -7.5.0 GA+!

Index Management

From the QRadar Console, you can use the Index Management tool to control database indexing on event and flow properties. Adding an indexed field in your search query helps to improve the speed of searches in QRadar by narrowing the overall data. Learn how to modify database indexing in the Index Management tool by using statistics before and after you enable or disable indexing on multiple properties.

Steps to enable indexing for the specific custom event properties:

1. On the navigation menu, click Admin and then click Index Management in the System Configuration section. 
2. Search, select, and click Enable Index for the required properties.
   • Qualys Host Id (custom)
   • Qualys Severity (custom)
   • Qualys QID (custom)
   • Status (custom)
   • Last Scan Date (custom)
   • Detection Type (custom)

3. Once you click Enable Index, the Indexed column shows  (Green Symbol)for the indexed property.

    

4. Click Save.

For more information, refer to Index Management.

Next Step

Multi-tenant Environment