Installing WinCollect 10 using the command line

You can quickly start collecting events from the Application, System, and Security event channels by using the command line to install WinCollect 10 using the command line.

Procedure

  1. Copy the installation .exe file to your computer.
  2. Run the following command:
    msiexec.exe /qn /i WinCollect-10.X.X-X.x64.msi QUICK_INSTALL="yes" WC_DEST="<qrhostname.domain.lab>" ADMIN_GROUP="true or false"
    Important: The Quick Install option uses TCP and will expose data as plain text over syslog unless changed to TLS.
    Important: You must change WC_DEST= to point to the IBM® QRadar® appliance where you want to send the events.
    Important: You must change ADMIN_GROUP= to be either true or false. For more information, see WinCollect Virtual Accounts .