IBM QRadar

IBM QRadar

Join this online topic group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.


#Security
#QRadar
#SecuringhybridcloudandAI
 View Only
Back to discussions
Expand all | Collapse all

Wincollect host does not send events

  • 1.  Wincollect host does not send events

    Posted 07/22/20 03:34 AM
    I have just installed a Managed Wincollect on a windows host. During installation, it automatically creates wincollect agent and the log source. 

    I also have wincollect destination created on port 514 udp. Everything seems to work fine. QRadar receives the heartbeat from the windows host, however, it seems that the windows host does not send any events at all to the QRadar.

    By the way we are using event collector, and the wincollect host is set to send to event collector.

    Is there anything else that I should check?

    Kind Regards

    ------------------------------
    Hans Widjaja
    ------------------------------


Related Content