IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Back to discussions
Expand all | Collapse all

QRadar Community Edition- 8413 and 514 port not listening

  • 1.  QRadar Community Edition- 8413 and 514 port not listening

    Posted Mon February 22, 2021 10:54 AM
    Hi all,

    Recently I had installed QRadar CE in Virtual Box for POC purpose in one of my client place. Upon installation, I had tried to configure Wincollect whereas i have done as per the instructions from IBM. But i couldn't able to discover my windows host where agent is configured. 
    After investigating, observed that syslog-ng is listening on the port 1514 instead of 514 and 8413 is not at all listening.

    netstat -nlp | grep 8413
    <no output>
    netstat -nlp | grep 514
    tcp6 :::1514 syslog-ng
    udp6 :::1514 syslog-ng

    Note: I have used CE edition .ova file which is released in IBM. And one more is that both ecs-ec and ecs-ep service couldn't able to start but ecs-ec-ingress is running.

    Kindly help me resolve this issue.

    ------------------------------
    Shabeer Syed
    ------------------------------


  • 2.  RE: QRadar Community Edition- 8413 and 514 port not listening

    Posted Tue February 23, 2021 10:51 AM
    Hi Shabeer,

    You are likely hitting the problem described here: https://www.ibm.com/support/pages/node/6395080

    There is a workaround in that article, it's a single command you need to run.

    Cheers
    Colin

    ------------------------------
    COLIN HAY
    IBM Security
    ------------------------------

    Original Message