Hello all,
I am integrating MS cloud app security with QRadar and used universal DSM and cloud REST api. I am getting the logs in QRadar but they are not parsed. I tried to parse them in DSM editor and successfully parsed most of those logs. The problem is when I open events in DSM editor, I can see all my custom extracted properties there but when I open event in log activity, my custom extracted properties don't show up there. What should I do to see custom properties in log activity events.
Thanks in Advance,
------------------------------
Abdul Rahman
------------------------------