IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  WinCollect stand-alone prompt installation turing forwarding events

    Posted Thu September 10, 2020 02:00 PM

    Hello,

    i've checked the documentation and the option 'Forwarded Events' is missing ( https://www.ibm.com/support/knowledgecenter/SSKMKU/com.ibm.wincollect.doc/t_ug_wincollect_cli_install.html )

    Is there any way to set 'Forwarded Events' for Microsoft Event Logs by command prompt or editing any file? I know that it can be done via WinCollect Management Console, but i would like to automate that step.

    Regards

    Jakub Skórzewski



    #QRadar
    #Support
    #SupportMigration


  • 2.  RE: WinCollect stand-alone prompt installation turing forwarding events

    Posted Fri December 18, 2020 07:44 PM

    Jakub, you can add "&Component1.Log.ForwardedEvents=true" to your installation script to add the Forwarded Events channel to your installation.



    #QRadar
    #Support
    #SupportMigration