Exam C1000-162 Topic 1 Question 99 Discussion

Actual exam question for IBM's C1000-162 exam
Question #: 99
Topic #: 1
Which two (2) of these custom property expression types are supported in QRadar?

Suggested Answer: C,D Vote an answer

* Custom Properties: QRadar allows you to extract custom properties from raw log and flow data, enriching your analysis capabilities.
* Supported Expression Types:
* Regex (Regular Expressions): Powerful patterns for extracting specific strings or values from textual data.
* JSON (JavaScript Object Notation): Extracts values from structured JSON data within events and flows.
* Unsupported Types:
* XLS: Excel spreadsheet format. QRadar isn't designed to parse spreadsheets directly.
* YAML: A data serialization language. QRadar's extraction is more focused on data within events and flows rather than standalone configuration files.
* HTML: Markup language used for web pages. Event data is unlikely to be solely in HTML format.
References:
* IBM QRadar Documentation - Custom Property Expression
Types: https://www.ibm.com/docs/en/qradar-on-cloud?topic=expressions-configuring-custom-property-ex
*

by Nicholas at Mar 30, 2026, 01:42 PM

Limited Time Offer

15%

Off

Get Premium C1000-162 Questions as Interactive Self Test Engine or PDF

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
0
0
0
10