IBM Support

QRadar: WinCollect File Forwarder Displays an Error and Not Receiving Events

Troubleshooting


Problem

The following technical note outlines some basic troubleshooting steps for WinCollect log sources that use WinCollect File Forwarder protocol.

Symptom

The Log source is in error with the message: ERROR - Events have not been received from this Log Source in over 720 minutes.

[{"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Component":"WinCollect","Platform":[{"code":"PF016","label":"Linux"}],"Version":"7.3.1;7.3;7.2.8;7.2","Edition":"All Editions","Line of Business":{"code":"LOB77","label":"Automation Platform"}}]

Log InLog in to view more of this document

This document has the abstract of a technical article that is available to authorized users once you have logged on. Please use Log in button above to access the full document. After log in, if you do not have the right authorization for this document, there will be instructions on what to do next.

Document Information

Modified date:
10 May 2019

UID

swg21679876