> For the complete documentation index, see [llms.txt](https://asafahmadov.gitbook.io/siem/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://asafahmadov.gitbook.io/siem/content/2.-data-collection/event-collection.md).

# Event collection

### **Log Collection**

**PUSH METHOD** \[*Log sources generate the logs and send them to QRadar*] - For example, Syslog

**PULL METHOD** \[*Log sources generate the logs <mark style="color:red;">**but don't**</mark> send them to QRadar, it is stored locally.QRadar needs to connect to the server and collect the information*] - For example, Collecting logs from Windows servers &#x20;

![images/12-1](https://4057632112-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2Fsiem%2F-Ml6Zql9PLvJWREU_lKe%2F-Ml6bH3qXAEf2dX7t0Sn%2F12-1.png?generation=1633289059433346\&alt=media)

![images/12-2](https://4057632112-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2Fsiem%2F-Ml6Zql9PLvJWREU_lKe%2F-Ml6bH3rZ8vNUw54AnLD%2F12-2.png?generation=1633289059428904\&alt=media)

## Examples:

![images/12-3](https://4057632112-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2Fsiem%2F-Ml6Zql9PLvJWREU_lKe%2F-Ml6bH3sVUr7CnQL-ugW%2F12-3.png?generation=1633289059426217\&alt=media)

![images/12-4](https://4057632112-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2Fsiem%2F-Ml6Zql9PLvJWREU_lKe%2F-Ml6bH3tXMgtvvnRbEBv%2F12-4.png?generation=1633289059797919\&alt=media)

![images/12-5
](https://4057632112-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2Fsiem%2F-Ml6Zql9PLvJWREU_lKe%2F-Ml6bH3uVitGuVJHS0v-%2F12-5.png?generation=1633289059783931\&alt=media)

![images/12-6](https://4057632112-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2Fsiem%2F-Ml6Zql9PLvJWREU_lKe%2F-Ml6bH3vNwOjM68SrrxW%2F12-6.png?generation=1633289059818353\&alt=media)

![images/12-7](https://4057632112-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2Fsiem%2F-Ml6Zql9PLvJWREU_lKe%2F-Ml6bH3wdJ-QNydQ_IAL%2F12-7.png?generation=1633289059777075\&alt=media)

![images/12-8](https://4057632112-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2Fsiem%2F-Ml6Zql9PLvJWREU_lKe%2F-Ml6bH3xhytuDWYVQkSl%2F12-8.png?generation=1633289059768448\&alt=media)