IBM QRadar

IBM QRadar

Join this online topic group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.


#Security
#QRadar
#SecuringhybridcloudandAI
 View Only

  • 1.  wincollect from windows logs >> Application

    Posted 04/23/21 01:16 AM

    I would to collect windows logs related to application.

    in other words , when Antivirus detect a virus it trigger logs under windows logs >> application



    #QRadar
    #Support
    #SupportMigration


  • 2.  RE: wincollect from windows logs >> Application

    Posted 06/24/21 07:22 AM

    You can pull Windows Application logs.. using Windows logsource or Wincollect.

    You can also make use of XPATH queries to get specific events.

    https://www.ibm.com/docs/en/qradar-common?topic=logs-windows-log-source-parameters

    https://www.ibm.com/docs/en/SSKMKU/com.ibm.wincollect.doc/b_wincollect.pdf



    #QRadar
    #Support
    #SupportMigration


Related Content