IBM QRadar

IBM QRadar

Join this online topic group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.


#Security
#QRadar
#SecuringhybridcloudandAI
 View Only

  • 1.  Qradar on Cloud

    Posted 06/26/20 06:50 AM
    Hi All,

    I would like to understand can we use MSRPC protocol to collect the Windows server event logs in Qradar on Cloud please ? Because in an article it is mentioned that we wont be able to use managed version of Wincollect agent hence i am not sure does Qradar on Cloud support RPC protocol ? 

    Regards,
    Karthick

    ------------------------------
    Karthick Krishnamoorthy
    ------------------------------


  • 2.  RE: Qradar on Cloud

    Posted 06/29/20 10:30 AM
    Hi Karthick,

    Yes the MSRPC protocol should work fine in a QRadar on Cloud environement. If you configure it to run on a Data Gateway it can collect the Windows events from the local on-prem Windows systems.

    Cheers
    Colin

    ------------------------------
    COLIN HAY
    IBM Security
    ------------------------------



Related Content