IBM Support

Configuring DCOM and WMI to Remotely Retrieve Windows 2008 Server Events

Question & Answer


Question

How do I configure my Windows 2008 Servers to allow QRadar to retrieve events over WMI?

[{"Product":{"code":"SSBQAC","label":"IBM QRadar SIEM"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Component":"Integrations - 3rd Party","Platform":[{"code":"PF033","label":"Windows"}],"Version":"7.1;7.0;7.2","Edition":"","Line of Business":{"code":"LOB77","label":"Automation Platform"}}]

Log InLog in to view more of this document

This document has the abstract of a technical article that is available to authorized users once you have logged on. Please use Log in button above to access the full document. After log in, if you do not have the right authorization for this document, there will be instructions on what to do next.

Document Information

More support for:
IBM QRadar SIEM

Software version:
7.1, 7.0, 7.2

Operating system(s):
Windows

Document number:
246961

Modified date:
20 September 2022

UID

swg21681046

Manage My Notification Subscriptions