Release of WinCollect stand-alone agent V10.1.3

About WinCollect V10.1.3

WinCollect 10.1.3 is available for stand-alone only deployments.

New features:

• Added ability to Test Destinations connection in the WinCollect Console.

Bug fixes and improvements including the following:

• Fixed an issue where a WinCollect 10 upgrade from WinCollect 7 failed to convert the AgentConfig.xml file if it contains two identical destinations (APAR IJ45128).
• Fixed an issue where events are not filtered correctly when using AND/OR operands, special characters, and comma in filters (APAR IJ44662).
• Fixed issues in the WorkQ that could result in WinCollect crashing (APAR IJ45288).
• Fixed an issue where WinCollect eventually crashes if the destination is down and the allotted disk cache is full (APAR IJ45282).
• Fixed an issue where WinCollect can create many crash dumps that can fill up the disk space. (IJ45451).
• Fixed an issue where WinCollect can stop collecting events when system time is changed.
• Fixed an issue where "#" in the Source Name prevents edits through the WinCollect Console.
• Upgraded versions of third party libraries.

• Windows® Server 2022 (including Core)
• Windows® Server 2019 (including Core)
• Windows® Server 2016 (including Core)
• Windows® Server 2012 (including Core)
• Windows® 10 (most recent)
• Windows® 11 (most recent)
  
  NOTE: WinCollect is not supported on versions of Windows® that moved to End Of Support by Microsoft®. After software is used beyond the Extended Support End Date, the product might still function as expected; however, IBM® does not make code or vulnerability fixes to resolve WinCollect issues for older operating systems. For more information, see the WinCollect 10 documentation.

IBM® Statement for WinCollect supported versions
Supported software versions for IBM® WinCollect are the latest version (n) and latest minus one (n-1). Therefore, the two newest versions of WinCollect are the versions that QRadar® support suggests with any support tickets (cases) that are opened. To prevent issues, it is important that you, as an administrator, keep WinCollect deployments updated when new versions are posted to IBM® Fix Central. For questions related to this statement, ask in the WinCollect forum: http://ibm.biz/wincollectforums.
 

Prerequisites for the WinCollect V10.1.3 upgrade

Installation prerequisites

WinCollect 10.0.1 and WinCollect V7.3.0 or greater agents that are in stand-alone mode can be upgraded to WinCollect V10.1.3.

QRadar® version prerequisites
WinCollect V10.1.3 supports QRadar® V7.4.3 or later.

WinCollect version prerequisites

WinCollect V7.3.0 stand-alone is the minimum version required to upgrade to QRadar® V10.x (any patch level).

WinCollect upgrade procedure

For information about installing or upgrading WinCollect 10, see IBM Documentation.

WinCollect Agent update links for 64-bit and 32-bit downloads:

• Download files for QRadar 7.5
  Full URL: http://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security&product=ibm/Other+software/IBM+Security+QRadar+SIEM&release=7.5.0&platform=Linux&function=fixId&fixids=7.5.0-QRADAR-AGENT_x64_WINCOLLECT-10.1.3-24.msi,7.5.0-QRADAR-AGENT_x86_WINCOLLECT-10.1.3-24.msi&includeSupersedes=0&source=fc
• Download files for QRadar 7.4
  Full URL: http://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security&product=ibm/Other+software/IBM+Security+QRadar+SIEM&release=7.4.0&platform=Linux&function=fixId&fixids=7.4.0-QRADAR-AGENT_x64_WINCOLLECT-10.1.3-24.msi,7.4.0-QRADAR-AGENT_x86_WINCOLLECT-10.1.3-24.msi&includeSupersedes=0&source=fc

For more information about stand-alone mode, see IBM Documentation.