IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  How to Forward events log from window without use Wincollect

    Posted Thu August 06, 2020 08:50 AM

    Dear team,

    Good day and I hope this email find you well !

    I would like to ask you something related to forward event log from window to Rsyslog Redhat and then we will use Rsyslog redhat to ​forward it to Qradar.

    We had set-up Rsyslog client on window and then we had Config it to forward event to Linux and then it received it by Rsyslog then we had try to forward it via Rsyslog Linux to Qrada but it doesn't show any information on it .

    ​So please kindly advice us how to make QRadar received event log .

    We do this because we want to monitor on another computer from 5 - 10 PC.

    ​​One if you have another way or another tool can make us easy please advice.

    Thank you in advance.

    Sincerely yours​

    ​

    ​



    #QRadar
    #Support
    #SupportMigration


  • 2.  RE: How to Forward events log from window without use Wincollect

    Posted Wed September 02, 2020 05:48 AM
    QRadar: Agentless Windows Events Collection using the MSRPC Protocol (MSRPC FAQ)

    https://www.ibm.com/support/pages/qradar-agentless-windows-events-collection-using-msrpc-protocol-msrpc-faq



    #QRadar
    #Support
    #SupportMigration


Related Content