Hi all,
Recently I had installed QRadar CE in Virtual Box for POC purpose in one of my client place. Upon installation, I had tried to configure Wincollect whereas i have done as per the instructions from IBM. But i couldn't able to discover my windows host where agent is configured.
After investigating, observed that syslog-ng is listening on the port 1514 instead of 514 and 8413 is not at all listening.
netstat -nlp | grep 8413
<no output>
netstat -nlp | grep 514
tcp6 :::1514 syslog-ng
udp6 :::1514 syslog-ng
Note: I have used CE edition .ova file which is released in IBM. And one more is that both ecs-ec and ecs-ep service couldn't able to start but ecs-ec-ingress is running.
Kindly help me resolve this issue.
------------------------------
Shabeer Syed
------------------------------