WinCollect log source parameters for Microsoft Hyper-V

If QRadar® does not automatically detect the log source, add a Microsoft Hyper-V log source on the QRadar Console by using the WinCollect protocol.

When using the WinCollect protocol, there are specific parameters that you must use.

The following table describes the parameters that require specific values to collect WinCollect events from Microsoft Hyper-V:
Table 1. WinCollect log source parameters for the Microsoft Hyper-V DSM
Parameter Value
Log Source type Microsoft Hyper-V
Protocol Configuration WinCollect
Application or Service Log Type Microsoft Hyper-V
WinCollect Agent Select the WinCollect agent that accesses the Microsoft Hyper-V server.

For a complete list of WinCollect protocol parameters and their values, see the WinCollect User Guide.