Hello All,
I have a lot of Windows log sources with Wincollect protocol that have "Not Available" as the status. The Wincollect agent they are configured with has a running status shown from the Wincollect window. Additionally, the Wincollect log file on the Windows server shows that it is connected and generating events.
To add to my confusion, I recently patched the Wincollect agent on the console from 7.2.9.72 to 7.2.9.105 and while these agents were able to receive and install the patch, their log sources still do not receive any events.
Has anyone experienced this before and how was it resolved
#QRadar#Support#SupportMigration