IBM Security QRadar

 View Only
  • 1.  QRadar CE Unable to receive Logs

    Posted Tue February 16, 2021 12:42 PM
    Hello Experts,

    I am having issue with my QRadar CE instance, i deployed wincollect agent on a windows machine, i cant see the deploy option, i have manually created the log source , but status is NA.

    I restarted the ecs-ec-ingress service, performed full deployment, yet issue persists. I have also configured syslog forwarding from my test Ubuntu machine, yet no logs received by QRadar.

    This was working before now, but stopped working. Kindly assist.

    Regards,


    ------------------------------
    benjamin Nworah
    ------------------------------


  • 2.  RE: QRadar CE Unable to receive Logs

    IBM Champion
    Posted Wed February 17, 2021 06:43 AM
    Benjamin,
    you most probably ran into license bug discussed here many times before
    Pls check https://www.ibm.com/support/pages/node/6395080
    BR
    Karl

    ------------------------------
    [Karl] [Jaeger] [Business Partner]
    [QRadar Specialist]
    [pro4bizz]
    [Karlsruhe] [Germany]
    [4972190981722]
    ------------------------------