Hi,

Is there a possibility to have a standalone event collector ?

Thanks in advance for your help.

Would you be able to add more information on what you are looking for? We do offer a disconnected Log Source and Log manager.

https://www.ibm.com/products/qradar-log-manager

https://www.ibm.com/docs/en/qradar-common?topic=disconnected-log-collector

The problem is that some policies are not allowing flows from the console to the MH (so can't be managed by the console).

Are you using encryption between the console and flow collector?

Yes ;)

The Disconnected Log Collector is in essence the Event Collector software that can be installed on any Linux host. The Disconnected Log Collector can be configured as a data diode (one-way) communication to forward events over UDP.

https://www.ibm.com/docs/en/qradar-common?topic=collector-business-scenarios-using-disconnected-log

Thanks Jonathan !