Event collection

Log Collection

PUSH METHOD [Log sources generate the logs and send them to QRadar] - For example, Syslog

PULL METHOD [Log sources generate the logs but don't send them to QRadar, it is stored locally.QRadar needs to connect to the server and collect the information] - For example, Collecting logs from Windows servers

Examples:

Last updated