Tutorial: QRadar CE SIEM - Installation and Configuration (Complete Steps)

QRadar Community Edition is a fully-featured free version of QRadar that is low memory, low EPS, and includes a perpetual license. This version is limited to 50 events per second and 5,000 network flows a minute, supports apps, but is based on a smaller footprint for non-enterprise use.

This tutorial video explains the process of installing and configuring the IBM QRadar Community Edition v7.3.3 and WinCollect Agent for Windows OS.

References:

[Hoopsgirlbp]

thank you so f-ing much for this video. I have spent 6+ hours tying to get QRadar running through VMWare workstation player. You are the only one I've found yet with a comprehensive video and I appreciate it so much. I kept using the IP address I input in the nmtui tool network settings to get to the QRadar login page. That ip add command helped me find the actual ip address I needed to use to get to the login page. I still have no idea where that ip address came from as it is not one I used in the nmtui tool but I hope I'll be able to find out eventually. 20:04 is KEY. Thank you Thank you for a great video.

[christiann]

A great tutorial video of QRadar CE! Highly appreciate it!

[faressalami]

brother i can't thank you enough really thank you.

[ZeeshanAliQureshi]

Thanks for this awesome tutorial looking forward to more of these related to QRadar.

[janetwilcox]

I was hoping ti see something on active directory integration. and perhaps more content on populating the dash board. Non the less. Great content. Awesome

[reginaldchukwuka]

Very insightful video. sincerely pleased to know you. nice content

[csouza]

Great content amazing video thanks for sharing.

[bvreddy]

Simply superb, Very useful . a million thanks.

[hkaboglu]

A great tutorial video!! Thank you so much!

[nirmanafernando]

Hi, thanks for the instructions, but I’m trying to download the file for wincollect agent sfs bundle, Can it be downloaded free from IBM, I’m having difficulties downloading the file

[realitystuffs]

nice explanation sir please create more videos in use cases please sir

[mxcbbn]

Some constructive criticism from someone totally, absolutely brand new to Q-Radar:

While the information as a whole is good and I got a chance to create muscle memory by navigating the console, the constant backtracking and searching for where to find something that went wrong is very confusing. In my opinion, a tutorial should be clear, concise instructions that flow well. Many parts of this video could have been edited out so as not to confuse the user. I don't really need to see you going back and forth trying to figure out why the Agent isn't showing in the WinCollect screen. If this is a "tip" you want to offer, then find the reason why it happened and share it as a warning. I don't need to spend 10 minutes following your mouse around trying to troubleshoot.

If we were talking a live demonstration or even a breakout session in which different factors can affect how something works, then OK. But here where you really just want to show new users the steps to install and setup, the constant troubleshooting is frustrating. I did learn quite a bit, but the amount I had to weed through in order to pick out what I learned was more than it should have been.

I really do appreciate the video and it takes time to do this so I also appreciate your time. My comments are more around how I would improve it to make the concepts easier to grasp for newcomers to the platform.

[samuelmasinga]

a great tutorial Session, thanks man.

[pratyush]

Hey Sami. I need a full QRadar SIEM course for beginner. Please make videos. You are doing great work.
Also for all in one deployment if possible

[niteshtelang]

Hi,
I am having difficulty finding the 730_Qradar wincollector 7.2.9-96.sfs file.Can you please share the file.

[asmaamustafa]

how can i correlate between DC and QRADAR to monitor the DC logs by qradar?

[ldtqkfz]

Hi Semi, thanks for the detailed video.
I am struck after running ./setup and accepting license agreement, it is not moving forward when reached at End of agreement.
I am using VM workstation 17 Pro.

[tefa]

where is wincollect * .sfs file download ?

[minibiswas]

How to delete saved credentials when we login to qradar? Is there any option to disable the display?

[shaikhshahid]

I am unable to find .sfs file exact version, i can see the other version but not that one which you mentioned in video, please suggest