Custom column injection points

Use custom column injection points to add custom columns in QRadar®.

The following table lists the custom column injection points that you can use in your app. The page IDs are used in the page_id field in the custom_columns block in the app's manifest file.

Table 1. Custom column injection point examples
Page ID Table Location
AssetDetailsVulnList

Assets > IP Address column to open Asset Details page and Vulnerabilities table
AssetList Asset tab list
AttackerList Offenses > By Source IP
ByAssetListForm Vulnerabilities > Manage vulnerabilities > by Asset
ByNetworkList Vulnerabilities > Manage vulnerabilities > by Network
ByOpenServiceList Vulnerabilities > Manage vulnerabilities > by Open Service
ByVulnerabilityInstanceList Vulnerabilities > Manage vulnerabilities
ByVulnerabilityList Vulnerabilities > Manage vulnerabilities > by Vulnerability
ExceptionRulesList Vulnerabilities > Vulnerability Exception
FlowsourceList Admin > Flow Sources
MyAssignedVulnerabilitiesList Vulnerabilities > My Assigned Vulnerabilities
NetworkList Offenses > By Network
NetworkOffenseList Offenses > By Network Double-click an offense.
OffenseList Offenses tab main page
ReferenceSetElems Admin > Reference Set Management. Double-click row to open content window > Content tab.
ReferenceSetRules Admin > Reference Set Management. Double-click row to open content window > References tab.
ReferenceSets Admin > Reference Set Management
SensorDeviceList Admin > Log Sources
TargetList Offenses > By Destination IP
VaScannerSchedulesList Admin > Schedule VA Scanners
VaScannersList Admin > VA Scanners