Configure Falcon LogScale Collector

The Falcon LogScale Collector configuration can be managed either:

  • Remotely (recommended) in a managed mode which provides a set of functionalities to centrally manage your configurations and assign a single configuration to multiple instances, see Create a Configuration - Remote for more information on remote configuration creation. You can also use groups to create and manage reusable and combinable configuration snippets.

  • Locally by manually editing the .yaml file, see Create a Configuration - Local.

    You can validate your configuration using a dedicated command.

    You can use the GraphQL API to create a LogScale Collector configuration with the createLogCollectorConfiguration() mutation. You can delete it with the deleteLogCollectorConfiguration()- To get a information on a configuration, use the logCollectorConfiguration() query.