Hi Eduardo
I'm have a similar experience to you but my solution seems to escape me.
We have Qradar 7.4.0 with a DLC v1.4.0 registered and trying to add a Disconnected Log Collector as a log source in QRadar.
But I am continually getting a error 'This Disconnected Log Collector does not support the selected protocol.' regardless of the protocol I choose when adding a single log source. I had also tried your solution with the Universal DSM and IBM Qradar DLC Protocol but that resulted in the same error message.
So my question is have you encountered this issue and if so how did you solve it?
Many thanks
Richard
------------------------------
richard robinson
------------------------------
Original Message:
Sent: Thu August 13, 2020 12:28 PM
From: Eduardo Ellery
Subject: Installing & configuring DLC
Answering myself to help other people who could misunderstand how this works!
I only had to create a new log source "Universal DSM" with protocol type "IBM Qradar DLC Protocol".
That was the trick.
Best,
Ellery
------------------------------
Eduardo Ellery
Original Message:
Sent: Thu August 13, 2020 07:39 AM
From: Eduardo Ellery
Subject: Installing & configuring DLC
Hello Community!
I'm learning about QRadar and at this point I decided to install a DLC to learn about that possibility. The problem is: I can not find in QRadar 7.4.0 where I add that type of element. All documentation I find shows:
"In the QRadar Log Source Management app, click the navigation menu icon (3 horizontal bars), and then click
Disconnected Log Collectors > Register Disconnected Log Collector."
Mine doesn't have this option. I have downloaded and running as TRIAL just to learn.
Any clues about what I'm missing? Should I install anything before adding DLC to QRadar?
DLC:
dlc-service-1.4.0-1.noarch.rpm
JAVA:
ibm-java-x86_64-sdk-8.0-6.15.bin
My LOG management APP:
Best,
------------------------------
Eduardo Ellery
------------------------------