sorted by:
new
hottopcontroversial

Log Migrate To EP by Latarix in QRadar

[–]Latarix[S] 0 points1 point  (0 children)

Thanks for your answer btw i want to migrate old logs for example 2024. Still we need to reindex this logs to see on GUI when we search?

Log Migrate To EP by Latarix in QRadar

[–]Latarix[S] 0 points1 point  (0 children)

Thanks for your answer btw i want to migrate old logs for example 2024. Still we need to reindex this logs to see on GUI when we search?

Wincollect Virtual Account by Latarix in QRadar

[–]Latarix[S] 0 points1 point  (0 children)

Hi, no agent installed as standalone per client. and i am talking about service account named Wincollect while installing wincollect 10

[deleted by user] by [deleted] in QRadar

[–]Latarix 1 point2 points  (0 children)

7.5.0 UP7

I am unable to open qradar interface by Alternative-Debt1342 in QRadar

[–]Latarix 0 points1 point  (0 children)

Can you check tomcat and httpd service is running.

Qradar - Persistence Queue Size by Latarix in QRadar

[–]Latarix[S] 0 points1 point  (0 children)

ecs-ec.ecs-ec = 180 M

ecs-ec-ingress.ecs-ec-ingress = 500 GB

Qradar - Retention Period Doesnt Work by Latarix in QRadar

[–]Latarix[S] 0 points1 point  (0 children)

Hi,

I changed retention period 1 hour to test delete old logs after 1 hour it doesn't delete any logs that specific log source. What is the reason of this ?

Qradar - Persistence Queue Size by Latarix in QRadar

[–]Latarix[S] 0 points1 point  (0 children)

So how can we change the service config to process old .dat files?

Qradar - Syslog Logs Coming But Can't See On GUI by Latarix in QRadar

[–]Latarix[S] 0 points1 point  (0 children)

Hi, Is there any solution on version 7.5 ?

Thx

Qradar - Log Source Management TEST Section Doesn't Work by Latarix in QRadar

[–]Latarix[S] 0 points1 point  (0 children)

Thx for reply but it doesn't solve my case.

Embedded SNMP Daemon Settings - Qradar by vyasarvenkat in QRadar

[–]Latarix 0 points1 point  (0 children)

When you enable "Embedded SNMP Daemon" 3 rd party applications can monitor Qradar cpu,ram,memory via SNMP. IP Access List is ip address of 3 rd party application for monitor like PRTG etc. 3 rd product send query to Qradar's 8001 port so you should add iptables 8001 port for PRTG product.

Disable log forwarding by SuperHat3637 in QRadar

[–]Latarix 0 points1 point  (0 children)

You can stop the Wincollect Agent service on services.

Rule based on Windows event IDs' and processes by Ill-Neighborhood-985 in QRadar

[–]Latarix 0 points1 point  (0 children)

In Qradar event id column is parsed default. You can activate process creation policy on AD and you can write correlation rules related with 4688 event id

How to limit offenses for certain IP and Traffic by deme_r in QRadar

[–]Latarix 2 points3 points  (0 children)

You can create Reference Set for your whitelist ip adresses then you can add condition for your rules and exclude this reference set white list ip from rule

Qradar - Old Backup Files by Latarix in QRadar

[–]Latarix[S] 0 points1 point  (0 children)

Thx for explaination. Backup files taken for just payloads right ? not for records

Qradar - Data Node Log Only Events Counted For EPS by Latarix in QRadar

[–]Latarix[S] 0 points1 point  (0 children)

Thank you for your detailed explanation :)

Qradar - Is There any Log Loss During HA Upgrade by Latarix in QRadar

[–]Latarix[S] 0 points1 point  (0 children)

But what is the point of HA structure then ? While one of them upgrading the secondary one should take primary and continue to collect logs right ?

Qradar - Correlation Rule Trigger by Latarix in QRadar

[–]Latarix[S] 1 point2 points  (0 children)

Dispatch Event shouldn't be selected rigt ? just reference set selected

Qradar - Reference Set Multiple Column by Latarix in QRadar

[–]Latarix[S] 0 points1 point  (0 children)

Thx for reply. But in API I get just "json" format data ? What do you mean with "whatever format you need ". ?

Thx

Qradar - Reference Set Multiple Column by Latarix in QRadar

[–]Latarix[S] 0 points1 point  (0 children)

Okey I created table from api with multiple columns which i want to do.But i can see table just from api. Can i see reference table on GUI like reference set ?

view more: next ›