We recommend that you enable the indexes of the added custom event properties. This will increase the performance of Kaspersky Threat Feed App.
To enable the indexes of the added custom event properties:
Admin tab of QRadar Console (system configuration tools)
The Index Management window opens.
A message box appears that asks you whether you want to save the changes you made.
Saving changes to the indexes