WinCollect log source parameters for Microsoft Hyper-V

If QRadar® does not automatically detect the log source, add a Microsoft Hyper-V log source on the QRadar Console by using the WinCollect protocol.

When using the WinCollect protocol, there are specific parameters that you must use.

The following table describes the parameters that require specific values to collect WinCollect events from Microsoft Hyper-V:

Table 1. WinCollect log source parameters for the Microsoft Hyper-V DSM
Parameter	Value
Log Source type	Microsoft Hyper-V
Protocol Configuration	WinCollect
Application or Service Log Type	Microsoft Hyper-V
WinCollect Agent	Select the WinCollect agent that accesses the Microsoft Hyper-V server.

For a complete list of WinCollect protocol parameters and their values, see the WinCollect User Guide.