IBM QRadar

 View Only

 Inquiries of QRadar Version x WinCollect7 Standalone Dependencies

HO Kam Ho's profile image
HO Kam Ho posted Fri June 13, 2025 04:58 AM

Hi everyone,

I know that for WinCollect 7 managed agents, I need to upgrade the WinCollect components alongside QRadar's version (as in, if I were to upgrade from 7.5.0 UP7 to UP9, I'll have to upgrade the WinCollect component from 7.3.1.28 to 7.3.1.43 via SFS file).

But what about WinCollect 7 standalone agents? Do I need to upgrade the standalone agent according to QRadar's version (just like managed agents)? If yes, do I just perform the upgrade via exe file on the standalone host, or do I have to also apply the SFS file to upgrade WinCollect component as well?

And what happens if I don't upgrade the WinCollect agent accordingly?

Thanks all!!

Neel Jotani's profile image
Neel Jotani posted Tue June 17, 2025 11:01 AM

When upgrading WinCollect 7 standalone agents, the process differs slightly from that of managed agents. Unlike managed agents, standalone agents don't require an SFS file upgrade. Instead, you upgrade a standalone agent by installing the new executable file (.exe) directly on the host machine.

It's also essential to verify that the version of the WinCollect standalone agent installed on your hosts is compatible with the QRadar version you're upgrading to. If there's a mismatch, you may experience issues such as incompatibility, reduced functionality, or even failure to collect logs.

Related Content