close
keyboard_arrow_left
Table of Contents
- play_arrow WinCollect 10 Overview
- play_arrow Uninstalling WinCollect 10
- play_arrow WinCollect 10 Stand-alone Console
- play_arrow WinCollect 10 stand-alone console
- play_arrow WinCollect 10 stand-alone configuration
- play_arrow Agent settings
- Service status
- Log Viewer
- Top Sources
- Applying pending changes
- play_arrow Create a source in the Source wizard
- play_arrow Configuration Scripts
- play_arrow Configuration scripts
- Configuring WinCollect 10 to collect Microsoft security events
- play_arrow Agent configuration update script use cases
- Adding NSA filtering to an existing source
- Add Sysmon to your existing Windows event sources
- Changing the heartbeat interval
- Modifying the event data storage configuration
- Sending Syslog data to JSA over TCP
- Change the console port number
- Configuring a remote source with an update script
- Add Active Directory lookup update script
- Update script to add a secondary destination
- Update script file warn and error messages
- play_arrow WinCollect Sources
- play_arrow WinCollect Sources
- play_arrow Advanced Settings
- play_arrow Advanced settings
- Agent advanced settings
- play_arrow Source advanced settings
- Microsoft Windows events advanced settings
- EVTX Forwarder advanced settings
- Common file-based plugin advanced settings
- File Forwarder advanced settings
- Microsoft DHCP Server advanced settings
- Microsoft DNS Debug advanced settings
- Microsoft Exchange Server advanced settings
- Microsoft Forefront TMG advanced settings
- Microsoft IIS advanced settings
- Microsoft NPS advanced settings
- Microsoft SQL Server advanced settings
- System advanced settings
- play_arrow The WinCollect 10 Statistics File
- play_arrow WinCollect Terminology
list Table of Contents
ON THIS PAGE
WinCollect 10 Command line installation advanced examples
date_range
28-Jun-22
Use one of the following examples to run a silent installation or specify an installation script that gives the agent instructions on what to monitor and where to send events.
Command line options
| Parameter | Description |
|---|---|
| QUICK_INSTALL | |
| WC_DEST | Used to define the destination. Creates a default destination called JSA. |
| INSTALLDIR | Used to specify the installation directory. |
| WC_SCRIPT | Used to specify the update script file to be used for advanced installation. |
Examples
| Specify the Installation Directory | The following command runs a silent quick installation that collects Application, System, and
Security events in the C:\WinCollect directory and specifies
qradarappliance.yourdomain.lab as the destination. msiexec.exe /qn /i
wincollect-10.X.X-X.x64.msi INSTALLDIR="C:\WinCollect\" QUICK_INSTALL="yes"
WC_DEST="qradarappliance.yourdomain.lab" |
| Specify a Configuration Script | The following command runs a silent installation and specifies an installation script that gives
the agent instructions on what to monitor and where to send events. msiexec.exe /qn /i
wincollect-10.X.X-X.x64.msi
WC_SCRIPT="c:\Users\<youruseraccount>\Desktop\update_AddMSEvents_EnableDestination.xml" |
