IBM Security QRadar

 View Only
  • 1.  QRadar 7.3.3 CE on VirtualBox- Port 8413 and 514 not listening

    Posted Mon February 22, 2021 10:56 AM
    Hi All,

    I have installed QRadar CE in Virtualbox without any errors while installation. Upon installation, logged in as root user to change my preferred IP through nmtui and applied successfully. Everything seems good while installation but after that i had tried to communicate with QRadar with 8413 for WinCollect which is not accessible.

    netstat -nlp | grep 8413 (nothing displayed)

    netstat -nlp | grep 514 
    tcp6   :::1514    syslog-ng
    udp6  :::1514    syslog-ng

    How to resolve this issue as i couldn't able to communicate any host with qradar. 

    Any useful replies are appreciated. Thanks

    ------------------------------
    Shabeer Syed
    ------------------------------


  • 2.  RE: QRadar 7.3.3 CE on VirtualBox- Port 8413 and 514 not listening
    Best Answer

    Posted Mon February 22, 2021 11:06 AM
    Hi Shabeer, 

    There's a link to a flash notice at the bottom of the Community Edition page here that addresses this, there's a command that you need to run from the command line to fix an issue with a license file. 

    I won't copy paste here just in case it changes in the future.

    ------------------------------
    Chris Fredericks
    ------------------------------



  • 3.  RE: QRadar 7.3.3 CE on VirtualBox- Port 8413 and 514 not listening

    Posted Tue February 23, 2021 06:41 AM
    Hi Chris,

    Thank you so much for the reply with appropriate mitigation of the issue... Upon running the command, it is working fine.

    ------------------------------
    Shabeer Syed
    ------------------------------



  • 4.  RE: QRadar 7.3.3 CE on VirtualBox- Port 8413 and 514 not listening

    IBM Champion
    Posted Mon February 22, 2021 11:23 AM
    of course you need to install wincollect 1st!

    ------------------------------
    [Karl] [Jaeger] [Business Partner]
    [QRadar Specialist]
    [pro4bizz]
    [Karlsruhe] [Germany]
    [4972190981722]
    ------------------------------



  • 5.  RE: QRadar 7.3.3 CE on VirtualBox- Port 8413 and 514 not listening

    Posted Tue February 23, 2021 06:44 AM
    Hi Karl,

    Yes ofcourse will do it for windows Security event log. Indeed i required a solution to resolve for adding Network devices which was the issue with some license.

    However, will try adding wincollect and check the same for 8413 communication as well.

    ------------------------------
    Shabeer Syed
    ------------------------------