Release of WinCollect stand-alone agent V10.1.5

About WinCollect V10.1.5

WinCollect 10.1.5 is available for stand-alone only deployments.

Important: Beginning in V10.1.4, WinCollect now uses a virtual account to increase application security. If you are upgrading from 10.1.3 or lower, refer to the 10.1.4 release notes for upgrade instructions.

New features:

• Added support for mTLS connection options to Status Server 
• Added warnings when making changes to destinations, which could result in short-term data loss

Bug fixes and improvements including the following:

• TLS Destinations with certificate content fixed (APAR IJ47503)
• Memory safety added to prevent memory leak (APAR IJ46788)
• Agent can collect log files when total size is greater than 2GB
• When collecting logs through WinCollect Console the correct size is displayed in the UI
• Agent continues to run when provided bad patch files
• Improved CPU usage when there are a large number of stale files
• Fixed possible integer underflow for count of events in memory
• Fixed issue where upgrading agents results in the virtual account overriding an alternate account after installation.
• Improved handling of events on disk for empty event bucket files
• Improved handling of events on disk when uninstalling
• Destinations with events on disk follow max EPS
• Upgraded version of third-party library.

• Windows® Server 2022 (including Core)
• Windows® Server 2019 (including Core)
• Windows® Server 2016 (including Core)
• Windows® Server 2012 (including Core)
• Windows® 10 (most recent)
• Windows® 11 (most recent)
  
  NOTE: WinCollect is not supported on versions of Windows® that moved to End Of Support by Microsoft®. After software is used beyond the Extended Support End Date, the product might still function as expected; however, IBM® does not make code or vulnerability fixes to resolve WinCollect issues for older operating systems. For more information, see the WinCollect 10 documentation.

IBM® Statement for WinCollect supported versions
Supported software versions for IBM® WinCollect are the latest version (n) and latest minus one (n-1). Therefore, the two newest versions of WinCollect are the versions that QRadar® support suggests with any support tickets (cases) that are opened. To prevent issues, it is important that you, as an administrator, keep WinCollect deployments updated when new versions are posted to IBM® Fix Central. For questions related to this statement, ask in the WinCollect forum: http://ibm.biz/wincollectforums.
 

Prerequisites for the WinCollect V10.1.5 upgrade

Installation prerequisites

WinCollect 10.0.1 and WinCollect V7.3.0 or greater agents that are in stand-alone mode can be upgraded to WinCollect V10.1.5.

QRadar® version prerequisites
WinCollect V10.1.5 supports QRadar® V7.5.0 or later.

WinCollect version prerequisites

WinCollect V7.3.0 stand-alone is the minimum version required to upgrade to QRadar® V10.x (any patch level).

WinCollect upgrade procedure

For more information about installing or upgrading WinCollect 10, see IBM Documentation.

WinCollect Agent update links for 64-bit and 32-bit downloads:

• Download files for QRadar 7.5
  Full URL: WinCollect V10.1.5 is not available on Fix Central. WinCollect V10.1.6 will be available soon.

For more information about stand-alone mode, see IBM Documentation.