Searching for ports in use by QRadar

Use the netstat command to determine which ports are in use on the IBM QRadar Console or managed host. Use the netstat command to view all listening and established ports on the system.

Procedure

Using SSH, log in to your QRadar Console, as the root user.
To display all active connections and the TCP and UDP ports on which the computer is listening, type the following command:
```
netstat -nap
```
To search for specific information from the netstat port list, type the following command:
```
netstat -nap | grep port
```
Examples:
- To display all ports that match 199, type the following command:
```
netstat -nap | grep 199
```
- To display information on all listening ports, type the following command:
```
netstat -nap | grep LISTEN
```