IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  WinCollect connection error

    Posted Fri November 19, 2021 07:22 AM
    Hello All,
    We are using QRadar AIO 7.4.3 FP2 in our environment. One of the agents of a Azure cloud machine is giving us connection errors as seen below:

    ERROR SRV.Code.SSLTCPRawSocket.10.30.30.215:8413 : Cannot connect to server -- Error code 10060: A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.
    11-18 09:06:23.963 INFO SRV.Code.ConfigurationPatchStrategy : Unable to connect to configuration updates; will try again -- The socket connection to the server failed

    Any suggestions to solve the issue? Will be thankful for any guidance.

    ------------------------------
    Abdul Rahman
    ------------------------------


  • 2.  RE: WinCollect connection error

    Posted Mon November 22, 2021 04:07 AM
    Access to the Windows server machine then open Windwos Power Shell. 

    then execute this command

    >Test-NetConnection -ComputerName <QRadar IP> -Port 8413 -InformationLevel "Detailed"

    ​The output should be success. 

    This will verify the connection between the windows and Qradar.

    ------------------------------
    Brian Kwak
    ------------------------------

    Original Message