This is expected.
In the Change Auditor QRadar integration, all possible custom properties are shown in the QRadar interface. However, only those custom properties that we have data for the particular event are populated. It is expected that many custom properties would have empty values (N/A).
For example, an Active Directory user event would have a blank "CA Folder Path" or "CA LDAP Type" value.
© ALL RIGHTS RESERVED. Feedback Términos de uso Privacidad Cookie Preference Center