Falcon LogScale Collector

The Falcon LogScale Collector is the native log shipper for LogScale. It can collect and send events to a LogScale repository, using LogScale ingest tokens to route data to the relevant repositories.

Falcon LogScale Collector, available on Linux, macOS and Windows can be managed centrally through Fleet Management UI enabling you to centrally manage multiple instances of Falcon LogScale Collector from within LogScale, or through local configuration files.

Using Falcon LogScale Collector requires a number of different steps:

  • Falcon LogScale Collector has some Key Concepts that should be understood in terms of how the data is transferred and affects the way the tool is configured.

  • Falcon LogScale Collector offers different methods for installation. For more information, see Installation.

  • Once installed, a configuration file sets the parameters for how Log Collector accesses and uses information. For more information, see Configuration.