Release of WinCollect stand-alone agent V10.1.15

About WinCollect V10.1.15

WinCollect 10.1.15 is available for stand-alone only deployments.

Important: Beginning in V10.1.4, WinCollect now uses a virtual account to increase application security. If you are upgrading from 10.1.3 or lower, refer to the 10.1.4 release notes for upgrade instructions.

• Fixed an issue where the WinCollect IIS logsource will indefinitely put a file in task queue (Known Issue: DT440642)
• Fixed an issue where the WinCollect IIS logsource Maximum wait time for Task expected re-queueing (WorkQ.Task.MaxMIA) default value should not be 120 because it was causing a collision issue with the IIS logsource Filestale duration. (Known Issue: DT440207)
• Fixed an issue where WinCollect DNS Server xpath sources collected duplicate events (Known Issue: DT443328)
  • NOTE: Users will need to delete their DNS server analytical log bookmarks for the fix to work.
• Fixed an issue where Image resources where not loaded in WCConsole
• Improvements were made to Kafka Destination Tooltips
• Added a configurable Filestale duration for filebased sources to the advanced settings in the UI

• WC Console Dashboard Graph is not working properly on all browsers - See Known Issue DT444740

• Windows® Server 2025 (including Core)
  NOTE: Forwarded events on Windows Server 2025 are affected by a known Microsoft issue. For more information see, DT439241.
• Windows® Server 2022 (including Core)
• Windows® Server 2019 (including Core)
• Windows® Server 2016 (including Core)
• Windows® 10 (most recent)
• Windows® 11 (most recent)

IBM® Statement for WinCollect supported versions
Supported software versions for IBM® WinCollect are the latest version (n) and the latest minus one (n-1). Therefore, the two newest versions of WinCollect are the versions that QRadar® support suggests with any support tickets (cases) that are opened. To prevent issues, it is important that you, as an administrator, keep WinCollect deployments updated when new versions are posted to IBM® Fix Central. For questions related to this statement, ask in the WinCollect forum: http://ibm.biz/wincollectforums.
 

Prerequisites for the WinCollect V10.1.15 upgrade

Installation prerequisites

WinCollect 10.0.1 and WinCollect V7.3.0 or greater agents that are in stand-alone mode can be upgraded to WinCollect V10.1.15.

QRadar® version prerequisites
WinCollect V10.1.15 supports QRadar® V7.5.0 or later.

WinCollect version prerequisites

WinCollect V7.3.0 stand-alone is the minimum version required to upgrade to QRadar® V10.x (any patch level).

WinCollect upgrade procedure

For more information about installing or upgrading WinCollect 10, see IBM Documentation.

WinCollect Agent update links for 64-bit and 32-bit downloads:

• Download files for QRadar 7.5
  Full URL: https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=IBM%20Security&product=ibm/Other+software/IBM+Security+QRadar+SIEM&release=7.5.0&platform=Linux&function=fixId&fixids=7.5.0-QRADAR-AGENT_x86_WINCOLLECT-10.1.15-2.msi,7.5.0-QRADAR-AGENT_x64_WINCOLLECT-10.1.15-2.msi&includeSupersedes=0&source=fc

For more information about stand-alone mode, see IBM Documentation.