IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Back to discussions
Expand all | Collapse all

HTTP Receiver port not opened after Log source configuration

  • 1.  HTTP Receiver port not opened after Log source configuration

    Posted Tue November 07, 2023 07:51 AM

    I installed QRadar CE from the ova template, mounted the iso and installed the receiver using yum. After creating the log source and deploying it, couldn't send events, no ports open for 12469 and TCP connections gets rejected on trying to send the event. On doing test, got this error :- "Unable to find any protocol source claiming id [51] on the existing ecs-ec-ingress stack". Tried disabling and enabling the source. Deleted, added it again and redeployed, same error.



    ------------------------------
    Chandra
    ------------------------------


Related Content