Event collection
Log Collection
PUSH METHOD [Log sources generate the logs and send them to QRadar] - For example, Syslog
PULL METHOD [Log sources generate the logs but don't send them to QRadar, it is stored locally.QRadar needs to connect to the server and collect the information] - For example, Collecting logs from Windows servers
Examples:
Last updated