IBM QRadar

IBM QRadar

Join this online topic group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.


#Security
#QRadar
#SecuringhybridcloudandAI
 View Only
  • 1.  Wincollect not send logs

    Posted 07/29/24 10:45 AM

    Hi,

    I installed wincollect managed on my Windows machine (7.31.28) and confirmed that access 8413 and 514 are provided on powershell, but I can only see the heartbeat logs and I am experiencing this problem on several machines. When I provided the same installations in my environment, no problem occurred. What can I do?



    ------------------------------
    Adem Güler
    ------------------------------


  • 2.  RE: Wincollect not send logs

    Posted 08/01/24 02:11 PM

    Hi Adem,

    Is this a managed or standalone wincollect installation?

    The following link outlines the configuration required for wincollect

    https://www.ibm.com/docs/en/qradar-common?topic=7-wincollect-overview

    Thanks



    ------------------------------
    John Dawson
    Qradar Support Architect
    IBM
    ------------------------------



  • 3.  RE: Wincollect not send logs

    Posted 08/02/24 04:00 AM

    Hi John,

    I think it has something to do with the version. My Qradar version was 7.5.0 U7 and the downloaded wincollect was 7.3.1.43. When I looked at the documentation, it was written that this works with U8 and above. The problem seems to have been fixed when I switched to a lower version.



    ------------------------------
    Adem Güler
    ------------------------------



  • 4.  RE: Wincollect not send logs

    Posted 08/02/24 06:38 AM

    Hi Adem,

    Glad to hear its working for you.

    Thanks



    ------------------------------
    John Dawson
    Qradar Support Architect
    IBM
    ------------------------------