WinCollect 10 Command line installation advanced examples
Use one of the following examples to run a silent installation or specify an installation script that gives the agent instructions on what to monitor and where to send events.
Command line options
| Parameter | Description |
|---|---|
| ADMIN_GROUP | Required on non-Domain Controller systems unless the ACCOUNT_NAME option is used. Specify true to add the WinCollect virtual account to the Administrators group or false if you do not want to add the WinCollect virtual account to the Administrators group. This parameter is not necessary when installing WinCollect on a Domain Controller. For more information, see WinCollect Virtual Accounts. |
| ACCOUNT_NAME | Required if the ADMIN_GROUP option is not used. Only one of the two can be specified at once. Specify an account to run the WinCollect service in the format of <domain>\<username>. This account must not require entering a password, and should have permissions to log on as a service. |
| QUICK_INSTALL | Installs an agent with the System, Application, and Security channels enabled. You must
specify a destination to send the events. For more information, see the WC_DEST parameter. Important: QUICK_INSTALL uses TCP as a default and will send plain text over syslog if not
changed.
|
| WC_DEST | Required for QUICK_INSTALL. Used to define the destination. Creates a default destination called QRadar®. |
| INSTALLDIR | Used to specify the installation directory. |
| WC_SCRIPT | Used to specify the update script file to be used for advanced installation. |
| CONSOLE_UI | Default is true. Specify false if console UI is not necessary. |
Examples
- Specify the Installation Directory
- The following command runs a silent quick installation that collects Application, System, and
Security events in the C:\WinCollect directory and specifies
qradarappliance.yourdomain.labas the destination:msiexec.exe /qn /i wincollect-10.X.X-X.x64.msi INSTALLDIR="C:\WinCollect\" QUICK_INSTALL="yes" WC_DEST="qradarappliance.yourdomain.lab" ADMIN_GROUP="true"
- Specify a Configuration Script
- The following command runs a silent installation and specifies an installation script that gives
the agent instructions on what to monitor and where to send events:
msiexec.exe /qn /i wincollect-10.X.X-X.x64.msi WC_SCRIPT="c:\Users\<youruseraccount>\Desktop\update_AddMSEvents_EnableDestination.xml" ADMIN_GROUP="true"
- Specify a Configuration Script from a shared network drive
- The following command specifies a shared network drive to run the installation script from:
msiexec.exe /qn /i wincollect-10.X.X-X.x64.msi WC_SCRIPT="\\<NFS_SERVER>\<SHARE_NAME>\update_AddMSEvents_EnableDestination.xml" ADMIN_GROUP="true"