Skip to content
LogScale Documentation
Full Library
Knowledge Base
Release Notes
Integrations
Training
API
GraphQL API
Search
Contacting Support
Falcon LogScale Documentation
Falcon LogScale Cloud Administration Manual
Falcon LogScale Self-Hosted Administration Manual
Falcon LogScale Data Management & Analysis
Specific Searches
Release Notes
Knowledge Base Articles
Integrations
Getting Started
Falcon LogScale Beginner Introduction
LogScale Overview
Search & Queries Tutorial
LogScale Video Series
Getting Started and User Interface Tutorial
Falcon Long Term Repository (FLTR) In-Product Tutorial
LogScale Internal Architecture
Ingesting Data
Falcon Log Collector
Parsing Data
Falcon Log Collector Manage your Fleet
Creating a Repository or View
Crowdstrike Parsing Standard 1.0
Third-Party Log Shippers
New Pages
Packages API
Falcon LogScale 1.164.0 GA (2024-11-12)
Falcon LogScale 1.163.0 GA (2024-11-05)
Types of Join
Join Methods
Using Ad-hoc Tables
defineTable()
Left Joins
Comparison to Left Join in SQL
Inner Join
Comparison to Inner Joins in SQL
Show more...
Updated Content
Removing Fields
Creating a New Parser
Falcon LogScale 1.164.0 GA (2024-11-12)
Falcon LogScale 1.163.0 GA (2024-11-05)
Falcon LogScale 1.159.1 LTS (2024-10-31)
Falcon LogScale 1.162.0 GA (2024-10-29)
Ingesting Raw JSON Data
Ingesting with Raw HEC
Ingesting Unstructured Data
Ingest API
Ingest API
Show more...
Managing LogScale Cloud
LogScale Cloud
Instance Administration
Understanding Your Organization
Organization Settings
Authentication & Identity Providers
Configuring Security
Ingesting Data
S3 Archiving for LogScale Cloud
LogScale URLs & Endpoints
Managing LogScale Self-Hosted
LogScale Self-Hosted
Installing LogScale
Instance Administration
Organization Settings
Configuring Security
Cluster Management
Ingesting Data
Limits & Standards
Updating LogScale
Data Storage, Buckets and Archiving
Configuration Settings
LogScale Configuration Parameters
Health Checks
LogScale URLs & Endpoints
LogScale Internal Repo Reference
The
humio-activity
Repository
The
humio-usage
Repository
The
humio-audit
Repository
The
humio-measurements
Repository
The
humio-fleet
Repository
The
humio-metrics
Repository
Data Management & Analysis
Data Management & Analysis
LogScale User Interface
Repositories & Views
Parsing Data
Searching Data
Writing Queries
Query Joins and Lookups
Query Language Syntax
Query Functions
Dashboards & Widgets
Automation
Alerts
Scheduled PDF Reports
Scheduled Searches
Actions
APIs, Integrating, & CLI
Application Programming Interfaces (APIs)
Ingest API
Integrations
Packages
Log Formats
Other Integrations
Third-Party Log Shippers
Command-Line Interface (
humioctl)
GraphQL API
GraphQL API
GraphQL Queries
GraphQL Mutation Fields
GraphQL Datatypes
Full Document Library
Falcon LogScale Cloud Administration
Falcon LogScale Cloud 1.154.0-1.164.0
Falcon LogScale Self-Hosted Administration
Falcon LogScale Self-Hosted 1.154.0-1.164.0 (GA)
Falcon LogScale Self-Hosted 1.143.0-1.153.3 (LTS)
Falcon LogScale Self-Hosted 1.137.0-1.142.1
Falcon LogScale Self-Hosted 1.132.0-1.136.2
Falcon LogScale Self-Hosted 1.124.1-1.131.1
Falcon LogScale Self-Hosted 1.118.0-1.124.0
Falcon LogScale Self-Hosted 1.113.0-1.117.0
Falcon LogScale Self-Hosted 1.107.0-1.112.0
Falcon LogScale Self-Hosted 1.101.0-1.106.2
Falcon LogScale Self-Hosted 1.89.0-1.100.0
Falcon LogScale Self-Hosted 1.83.0-1.88.0
Falcon LogScale Self-Hosted 1.77.0-1.82.3
Falcon LogScale Self-Hosted 1.71.0-1.76.3
Falcon LogScale Self-Hosted 1.0.0-1.70.2
LogScale Data Analysis
Data Analysis 1.154.0-1.164.0
Data Analysis 1.143.0-1.153.3
Data Analysis 1.137.0-1.142.1
Data Analysis 1.132.0-1.136.2
Data Analysis 1.124.1-1.131.1
Data Analysis 1.118.0-1.124.0
Data Analysis 1.113.0-1.117.0
Data Analysis 1.107.0-1.112.0
Data Analysis 1.101.0-1.106.2
Data Analysis 1.89.0-1.100.0
Data Analysis 1.83.0-1.88.0
Data Analysis 1.77.0-1.82.3
Data Analysis 1.71.0-1.76.3
Data Analysis 1.0.0-1.70.2
Falcon LogScale Collector
Falcon LogScale Collector 1.3.0-1.7.4
Falcon LogScale Collector 1.2.0-1.2.1
LogScale APIs
Falcon LogScale APIs 1.118.0-1.164.0
LogScale APIs 1.0.0-1.117.0
LogScale GraphQL Reference
LogScale GraphQL Reference - Queries
LogScale GraphQL Reference - Mutations
LogScale GraphQL Reference - Datatypes
Supporting Information
Training
LogScale System Repository Schema Guide
LogScale Parsing Standard 1.0
Integrations
Knowledge Base
Release Notes
LogScale Third-Party Log Shippers
LogScale Command Line
LogScale Query Language Grammar Subset
Getting Started
Falcon LogScale Beginner Introduction
LogScale Overview
Search & Queries Tutorial
LogScale Video Series
Getting Started and User Interface Tutorial
Falcon Long Term Repository (FLTR) In-Product Tutorial
LogScale Internal Architecture
Managing LogScale Cloud
LogScale Cloud
Instance Administration
Understanding Your Organization
Organization Settings
Authentication & Identity Providers
Configuring Security
Ingesting Data
S3 Archiving for LogScale Cloud
LogScale URLs & Endpoints
Managing LogScale Self-Hosted
LogScale Self-Hosted
Installing LogScale
Instance Administration
Organization Settings
Configuring Security
Cluster Management
Ingesting Data
Limits & Standards
Updating LogScale
Data Storage, Buckets and Archiving
Configuration Settings
LogScale Configuration Parameters
Health Checks
LogScale URLs & Endpoints
Data Management & Analysis
Data Management & Analysis
LogScale User Interface
Repositories & Views
Parsing Data
Searching Data
Writing Queries
Query Joins and Lookups
Query Language Syntax
Query Functions
Dashboards & Widgets
Automation
Alerts
Scheduled PDF Reports
Scheduled Searches
Actions
Ingesting Data
Falcon Log Collector
Parsing Data
Falcon Log Collector Manage your Fleet
Creating a Repository or View
Crowdstrike Parsing Standard 1.0
Third-Party Log Shippers
APIs, Integrating, & CLI
Application Programming Interfaces (APIs)
Ingest API
Integrations
Packages
Log Formats
Other Integrations
Third-Party Log Shippers
Command-Line Interface (
humioctl)
New Pages
Packages API
Falcon LogScale 1.164.0 GA (2024-11-12)
Falcon LogScale 1.163.0 GA (2024-11-05)
Types of Join
Join Methods
Using Ad-hoc Tables
defineTable()
Left Joins
Comparison to Left Join in SQL
Inner Join
Comparison to Inner Joins in SQL
Updated Content
Removing Fields
Creating a New Parser
Falcon LogScale 1.164.0 GA (2024-11-12)
Falcon LogScale 1.163.0 GA (2024-11-05)
Falcon LogScale 1.159.1 LTS (2024-10-31)
Falcon LogScale 1.162.0 GA (2024-10-29)
Ingesting Raw JSON Data
Ingesting with Raw HEC
Ingesting Unstructured Data
Ingest API
Ingest API
Menu
Search
Enter search term
Clear highlights