Installing Using Containers

Container Deployment

LogScale Kubernetes Reference Architecture

You should deploy LogScale with Kubernetes. This section explains the reference architecture for self-hosted deployment using Kubernetes, including detail on self-hosted, Amazon Web Services (AWS), and Google Cloud Platform (GCP) environments.

Container Deployment Using humio-core

For a basic container-based cluster deployment, including deployment of a Kafka cluster.

Container Deployment Using humio (Testing Only)

For development and testing, a single container with everything needed to run LogScale. Not supported for production deployments.

CrowdStrike recommends that LogScale is deployed within a container environment, since this provides an environment that enables the cluster to be configured, and scaled, as the size of the data and ingest volume increases.

CrowdStrike provides two separate containers for deploying LogScale:

Feature humio-core humio
LogScale Yes Yes
Kafka Not included Yes
Use for Production Testing and Development only

Important

Production deployments should use the humio-core deployment in production that requires a requires a separate Kafka cluster. Having Kafka and LogScale on the same host can cause performance issues, particularly during ingest. Having separate Kafka and Falcon LogScale containers and clusters enables more flexible and reliable scaling.

To deploy a solution using either container: