Configuring managed WinCollect agents

After you install a managed WinCollect deployment, you manage your deployment by using IBM® Security QRadar®.

You can manage your WinCollect agents, destinations, and schedules. You can also manage configuration options for systems with restricted policies.

The WinCollect agent is responsible for communicating with the individual log sources, parsing events, and forwarding the event information to QRadar by using syslog.

After you install the WinCollect agent on your Windows host, wait for QRadar to automatically discover the WinCollect agent. The automatic discovery process typically takes a few minutes to complete.

Note: The registration request to the QRadar host might be blocked by firewalls in your network.