You can easily get WinCollect 10 up and running and sending events
to IBM®
QRadar® by selecting
Quick during the installation and specifying the QRadar appliance you want to send
your events to.
Procedure
-
Download the latest version of the WinCollect 10 agent.
- Launch a command prompt with administrative privileges.
- Run the following command and replace
WinCollect-10.X.X-X.x64.msi
with
the file from step 1.
msiexec.exe /i WinCollect-10.X.X-X.x64.msi
- In the Welcome to the IBM 64-bit Setup Wizard window, click
Next.
- Accept the EULA and click Next.
- In the Virtual account window, select whether or not to add the
virtual account to the Administrators group, then click Next.
- In the Installer Options window, select
Quick.
The Quick installation option configures the agent to
collect Security, System, and Application events.
- In the Destination Input window, type in the
Hostname of the QRadar appliance you want to send
your WinCollect events to, and click
Install.
- After the installation is complete, the Completing the IBM WinCollect Setup
Wizard window appears. Click Finish to close the installer.