IBM Security QRadar

 View Only
Expand all | Collapse all

QRadar Community Edition- 8413 and 514 port not listening

  • 1.  QRadar Community Edition- 8413 and 514 port not listening

    Posted Mon February 22, 2021 10:54 AM
    Hi all,

    Recently I had installed QRadar CE in Virtual Box for POC purpose in one of my client place. Upon installation, I had tried to configure Wincollect whereas i have done as per the instructions from IBM. But i couldn't able to discover my windows host where agent is configured. 
    After investigating, observed that syslog-ng is listening on the port 1514 instead of 514 and 8413 is not at all listening.

    netstat -nlp | grep 8413
    <no output>
    netstat -nlp | grep 514
    tcp6 :::1514 syslog-ng
    udp6 :::1514 syslog-ng

    Note: I have used CE edition .ova file which is released in IBM. And one more is that both ecs-ec and ecs-ep service couldn't able to start but ecs-ec-ingress is running.

    Kindly help me resolve this issue.

    ------------------------------
    Shabeer Syed
    ------------------------------


  • 2.  RE: QRadar Community Edition- 8413 and 514 port not listening

    Posted Tue February 23, 2021 10:51 AM
    Hi Shabeer,

    You are likely hitting the problem described here: https://www.ibm.com/support/pages/node/6395080

    There is a workaround in that article, it's a single command you need to run.

    Cheers
    Colin

    ------------------------------
    COLIN HAY
    IBM Security
    ------------------------------

    Original Message