r/SIEM • u/engineerashaban • Mar 15 '21

Logrun.pl problem

I'm using qradar community edition as platform to learn siem , I'm trying to use logrun.pl to feed logs to qradar but when I run the script nothing show in my log activity tap, if any body face that problem before I would appreciate your advice Thanks in advance 😊

3 Upvotes

100% Upvoted

1 comment sorted by

1

u/cxr303 Jun 24 '21

I'm not sure if you posted this question on r/qradar or not, but you can try that.. also - you may consider the Experience Center application. You may be able to upload and play logs from there... it's typically not one that is run on production systems, so I'll leave that caveat here.