IBM QRadar

IBM QRadar

Join this online topic group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.


#Security
#QRadar
#SecuringhybridcloudandAI
 View Only

  • 1.  How to Forward events log from window without use Wincollect

    Posted 08/06/20 08:50 AM

    Dear team,

    Good day and I hope this email find you well !

    I would like to ask you something related to forward event log from window to Rsyslog Redhat and then we will use Rsyslog redhat to ​forward it to Qradar.

    We had set-up Rsyslog client on window and then we had Config it to forward event to Linux and then it received it by Rsyslog then we had try to forward it via Rsyslog Linux to Qrada but it doesn't show any information on it .

    ​So please kindly advice us how to make QRadar received event log .

    We do this because we want to monitor on another computer from 5 - 10 PC.

    ​​One if you have another way or another tool can make us easy please advice.

    Thank you in advance.

    Sincerely yours​

    ​

    ​



    #QRadar
    #Support
    #SupportMigration


  • 2.  RE: How to Forward events log from window without use Wincollect

    Posted 09/02/20 05:48 AM
    QRadar: Agentless Windows Events Collection using the MSRPC Protocol (MSRPC FAQ)

    https://www.ibm.com/support/pages/qradar-agentless-windows-events-collection-using-msrpc-protocol-msrpc-faq



    #QRadar
    #Support
    #SupportMigration


Related Content