Skip to content
LogScale Documentation
Full Library
Knowledge Base
Release Notes
Integrations
Training
API
Contacting Support
Falcon LogScale Documentation
Falcon LogScale Cloud Administration Manual
Falcon LogScale Self-Hosted Administration Manual
Falcon LogScale Data Management & Analysis
Getting Started
Getting Started with LogScale
LogScale Overview
Search & Queries Tutorial
LogScale Video Series
Getting Started and User Interface Tutorial
Falcon Long Term Repository (FLTR) In-Product Tutorial
Ingesting Data
Falcon LogScale Collector
Parsing Data
Creating a Repository or View
Other Log Shippers
New Pages
Helm Chart with Falcon CWP (Cloud Workload Protection)
Falcon LogScale 1.129.0 Preview (2024-03-12)
Best Practice:
Create a stacked bar chart over time
How-To:
Get GeoIP Data for RDP User Logins and Place on World Map with Magnitude
FAQ:
How do I do a join() statement?
How-To:
Create a shorthand process lineage in the field processLineage
Best Practice:
Get Markdown URLs to display as URLs instead of strings when using groupBy()
How-To:
Do a regex() extraction without filtering data
Best Practice:
Create a fixed-width column using format()
How-To:
Add ComputerName or UserName to Falcon search results
How-To:
Get the first and last event of a groupBy()
Best Practice:
Remove decimal place from timestamp field and convert to human-readable time
Updated Content
GraphQL API
Accessing GraphQL using API Explorer
Accessing GraphQL using a Script or
curl
Falcon LogScale 1.129.0 Preview (2024-03-12)
Best Practice:
Create a stacked bar chart over time
Best Practice:
Get Markdown URLs to display as URLs instead of strings when using groupBy()
How-To:
Create a shorthand process lineage in the field processLineage
How-To:
Do a regex() extraction without filtering data
FAQ:
How do I do a join() statement?
How-To:
Get GeoIP Data for RDP User Logins and Place on World Map with Magnitude
Best Practice:
Create a fixed-width column using format()
Managing LogScale Cloud
LogScale Cloud
LogScale Cloud Administration
Understanding Your Organization
Organization Settings
Authentication & Identity Providers
Configuring Security
Ingesting Data
S3 Archiving for LogScale Cloud
LogScale URLs & Endpoints
Managing LogScale Self-Hosted
LogScale Self-Hosted
Installing LogScale
Self-Hosted Administration
Organization Settings
Configuring Security
Cluster Management
Ingesting Data
Updating LogScale
Buckets & Archive Storage
Configuration Settings
LogScale Configuration Parameters
Health Checks
LogScale URLs & Endpoints
Data Management & Analysis
Data Management & Analysis
LogScale User Interface
Repositories & Views
Parsing Data
Searching Data
Writing Queries
Query Language Syntax
Query Functions
Dashboards & Widgets
Automation & Alerts
APIs, Integrating, & CLI
Application Programming Interfaces (APIs)
Integrations
Packages
Other Log Shippers
Command-Line Interface
LogScale Metrics
GraphQL API
GraphQL API
GraphQL Queries
GraphQL Mutation Fields
GraphQL Datatypes
Full Document Library
Falcon LogScale Cloud Administration
Falcon LogScale Cloud 1.124.1-1.129.0
Falcon LogScale Self-Hosted Administration
Falcon LogScale Self-Hosted 1.124.1-1.129.0 (Preview)
Falcon LogScale Self-Hosted 1.118.0-1.124.0 (Stable)
Falcon LogScale Self-Hosted 1.113.0-1.117.0
Falcon LogScale Self-Hosted 1.107.0-1.112.0
Falcon LogScale Self-Hosted 1.101.0-1.106.2
Falcon LogScale Self-Hosted 1.89.0-1.100.0
Falcon LogScale Self-Hosted 1.83.0-1.88.0
Falcon LogScale Self-Hosted 1.77.0-1.82.3
Falcon LogScale Self-Hosted 1.71.0-1.76.3
Falcon LogScale Self-Hosted 1.0.0-1.70.2
LogScale Data Analysis
Data Analysis 1.124.1-1.129.0
Data Analysis 1.118.0-1.124.0
Data Analysis 1.113.0-1.117.0
Data Analysis 1.107.0-1.112.0
Data Analysis 1.101.0-1.106.2
Data Analysis 1.89.0-1.100.0
Data Analysis 1.83.0-1.88.0
Data Analysis 1.77.0-1.82.3
Data Analysis 1.71.0-1.76.3
Data Analysis 1.0.0-1.70.2
Falcon LogScale Collector
Falcon LogScale Collector 1.3.0-1.6.2
Falcon LogScale Collector 1.2.0-1.2.1
Supporting Information
Integrations
Knowledge Base
Release Notes
Training
LogScale System Repository Schema Guide
LogScale GraphQL Reference
LogScale GraphQL Reference - Queries
LogScale GraphQL Reference - Mutations
LogScale GraphQL Reference - Datatypes
LogScale Query Language Grammar Subset
Getting Started
Getting Started with LogScale
LogScale Overview
Search & Queries Tutorial
LogScale Video Series
Getting Started and User Interface Tutorial
Falcon Long Term Repository (FLTR) In-Product Tutorial
Managing LogScale Cloud
LogScale Cloud
LogScale Cloud Administration
Understanding Your Organization
Organization Settings
Authentication & Identity Providers
Configuring Security
Ingesting Data
S3 Archiving for LogScale Cloud
LogScale URLs & Endpoints
Managing LogScale Self-Hosted
LogScale Self-Hosted
Installing LogScale
Self-Hosted Administration
Organization Settings
Configuring Security
Cluster Management
Ingesting Data
Updating LogScale
Buckets & Archive Storage
Configuration Settings
LogScale Configuration Parameters
Health Checks
LogScale URLs & Endpoints
Data Management & Analysis
Data Management & Analysis
LogScale User Interface
Repositories & Views
Parsing Data
Searching Data
Writing Queries
Query Language Syntax
Query Functions
Dashboards & Widgets
Automation & Alerts
Ingesting Data
Falcon LogScale Collector
Parsing Data
Creating a Repository or View
Other Log Shippers
APIs, Integrating, & CLI
Application Programming Interfaces (APIs)
Integrations
Packages
Other Log Shippers
Command-Line Interface
LogScale Metrics
New Pages
Helm Chart with Falcon CWP (Cloud Workload Protection)
Falcon LogScale 1.129.0 Preview (2024-03-12)
Best Practice:
Create a stacked bar chart over time
How-To:
Get GeoIP Data for RDP User Logins and Place on World Map with Magnitude
FAQ:
How do I do a join() statement?
How-To:
Create a shorthand process lineage in the field processLineage
Best Practice:
Get Markdown URLs to display as URLs instead of strings when using groupBy()
How-To:
Do a regex() extraction without filtering data
Best Practice:
Create a fixed-width column using format()
How-To:
Add ComputerName or UserName to Falcon search results
How-To:
Get the first and last event of a groupBy()
Best Practice:
Remove decimal place from timestamp field and convert to human-readable time
Updated Content
GraphQL API
Accessing GraphQL using API Explorer
Accessing GraphQL using a Script or
curl
Falcon LogScale 1.129.0 Preview (2024-03-12)
Best Practice:
Create a stacked bar chart over time
Best Practice:
Get Markdown URLs to display as URLs instead of strings when using groupBy()
How-To:
Create a shorthand process lineage in the field processLineage
How-To:
Do a regex() extraction without filtering data
FAQ:
How do I do a join() statement?
How-To:
Get GeoIP Data for RDP User Logins and Place on World Map with Magnitude
Best Practice:
Create a fixed-width column using format()
Menu
Search
Enter search term
Clear highlights