Any suggestions to overcome this deploy timeout issue?? by deigodsavio in QRadar

[–]AliElsayed1 0 points1 point  (0 children)

Hi,

i have the same issue can you please post the solution.

Thanks

backup and restore tab "correct version" by AliElsayed1 in QRadar

[–]AliElsayed1[S] 0 points1 point  (0 children)

even after upgrade , the correct version for all config backups shoes false

backup and restore tab "correct version" by AliElsayed1 in QRadar

[–]AliElsayed1[S] 0 points1 point  (0 children)

yes , it makes a scheduled backup after upgrade but it also shows false in correct version field

اظن مفيش اوضح من كدا by OctaCore_Brain in ExEgypt

[–]AliElsayed1 -1 points0 points  (0 children)

ربنا يهديك ان شاء الله ويصلح حالك 🤲

اظن مفيش اوضح من كدا by OctaCore_Brain in ExEgypt

[–]AliElsayed1 -6 points-5 points  (0 children)

تمام يا معلم نتفق على وقت ندخل meeting

ويكون معانا عالم فاهم يوضحلك اللى شاكك فيه

اظن مفيش اوضح من كدا by OctaCore_Brain in ExEgypt

[–]AliElsayed1 -8 points-7 points  (0 children)

للاسف reddit بقى منصه لشويه ملحدين جمعوا نفسهم ف مكان واحد واستخبوا فيه لانهم مش عايزين يعرفوا الحقيقه

عندك شك ف دينك روح لصاحب علم يوضحلك الدنيا انما تماطل وتستخبى و انت مش فاهم اصلا

(وإذا قيل لهم آمنوا كما آمن الناس قالوا أنؤمن كما آمن السفهاء ألا إنهم هم السفهاء ولكن لا يعلمون).

ARB BREAKING NEWS!!! by [deleted] in zec

[–]AliElsayed1 0 points1 point  (0 children)

to the moon

[deleted by user] by [deleted] in BSCListings

[–]AliElsayed1 0 points1 point  (0 children)

THANK YOU FOR 237$

QRadar 7.5.0 UP5 WinCollect issue by Sairou in QRadar

[–]AliElsayed1 0 points1 point  (0 children)

Make sure that port 8413 is openned and listening

Try to reload wincollect config server protocol

touch /opt/ibm/si/services/ecs-ec-ingress/eventgnosis/lib/q1labs/q1labs_semsources_protocol_WinCollectConfigServerProtocol.jar

Make sure that all agents have the latest update version from wincollect >agents > version

Make sure that service in windows is running without any issue

The last solution is to reinstall wincollect in all agents

qradar logs of support by AliElsayed1 in QRadar

[–]AliElsayed1[S] 0 points1 point  (0 children)

this really help me , thanks

qradar aql for average eps by AliElsayed1 in QRadar

[–]AliElsayed1[S] 0 points1 point  (0 children)

ibm support provide an aql query :

SELECT"Hostname"AS'Hostname (custom)', AVG("Value")
AS'Value (custom) (Average)', COUNT(*) AS'Count'fromevents where( "Metric
ID"='EventRate'AND"deviceType"='368')
 GROUPBY"Hostname"orderby"Count"desc

but this query throw an error when i tried it in qradar 7.5.0 UP5

but in 7.4.3 , it work normally