IBM Support

WinCollect: Managed WinCollect agent fails to send events to qradar with error: Register Instance response type 2 size 57 version 2.2 - An error was reported on server. Check the server's log files for details.. ALEResp(200) Check the error logs.

Troubleshooting


Problem

Issue with WinCollect Integration: Despite the successful installation of WinCollect on the Windows platform, QRadar encounters difficulties in generating automatic log sources and fails to register the agent entry within the Admin WinCollect tab.

Symptom

The managed WinCollect Agent encounters an error while attempting to create auto-log sources and agent on the QRadar end, resulting in an error message appearing on the WinCollect side.

07-19 12:00:03.615 INFO SRV.Code.SSLConfigServerAPIClient.v2.XXXXXXXXX : Register Instance response type 2 size 57 version 2.2 - An error was reported on server. Check the server's log files for details.. ALEResp(200) Check the error logs.

Document Location

Worldwide

[{"Type":"MASTER","Line of Business":{"code":"LOB77","label":"Automation Platform"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"ARM Category":[{"code":"a8m0z000000cwtwAAA","label":"WinCollect"}],"ARM Case Number":"","Platform":[{"code":"PF016","label":"Linux"}],"Version":"7.5.0"}]

Log InLog in to view more of this document

This document has the abstract of a technical article that is available to authorized users once you have logged on. Please use Log in button above to access the full document. After log in, if you do not have the right authorization for this document, there will be instructions on what to do next.

Document Information

Modified date:
30 August 2024

UID

ibm17161564