WinCollect 101 Administrators can use WinCollect to capture Windows-based events for QRadar SIEM administrators. Find my Version

Select your version


WinCollect is a Syslog event forwarder that administrators can use to forward events from Windows logs to QRadar®. WinCollect can collect events from systems locally or be configured to remotely poll other Windows systems for events. WinCollect uses the Windows Event Log API to gather events, and then WinCollect sends the events to QRadar.