LogScale URLs & Endpoints
Within LogScale and the documentation, the base URL of your
LogScale installation is denoted as
$YOUR_LOGSCALE_URL. The tables below list some commonly
used endpoints, primarily for ingest, based on
$YOUR_LOGSCALE_URL, as well as the URLs of our cloud
environments.
Note
The IP addresses associated with the hostname(s) used to access LogScale are not static and may be subject to change, although changes are infrequent.
Important
For ingest-related endpoints, the
$HOST portion of your endpoint may
include the word ingest within the hostname. If the ingest URL
is different, the full ingest url will be displayed at the top of the
Ingest tokens page.
| URL Template | Description |
|---|---|
${HOST}:${PORT}
| Standard UI endpoint. |
${HOST}:${PORT}
| Standard Falcon LogScale Collector endpoint, including when sending LogScale logs to LogScale. |
${HOST}:${PORT}/api/v1/*
| Prefix for REST-based API queries for ingest, searching, lookup, actions, alerts and other APIs. |
${HOST}:${PORT}/api/v1/ingest/humio-structured
| LogScale structured data ingest endpoint. |
${HOST}:${PORT}/api/v1/ingest/humio-unstructured
| LogScale unstructured data ingest endpoint. |
${HOST}:${PORT}/api/v1/ingest/raw
| LogScale raw data ingest endpoint. |
${HOST}:${PORT}/api/v1/ingest/json
| LogScale raw JSON ingest endpoint. |
${HOST}:${PORT}/api/v1/ingest/elastic-bulk
| Elastic Bulk endpoint. |
${HOST}:${PORT}/_bulk
| Elastic Bulk endpoint. |
${HOST}:${ELASTIC_PORT}/
| Elastic Bulk endpoint (by port). |
${HOST}:${PORT}/api/v1/ingest/otlp
| OpenTelemetry endpoint. |
${HOST}:${PORT}/api/v1/ingest/hec
| LogScale Event Collector API endpoint. |
${HOST}:${PORT}/api/v1/ingest/hec/raw
| Raw LogScale Event Collector API endpoint. |
${HOST}:${PORT}/services/collector
| LogScale Event Collector API endpoint. |
${HOST}:${PORT}/services/collector/raw
| Raw LogScale Event Collector API endpoint. |
${HOST}:${PORT}/graphql
| GraphQL endpoint |
The table below explains the placeholders above. Note that
${HOST}:${PORT} is the equivalent of
$YOUR_LOGSCALE_URL.
| Component | Default | Description |
|---|---|---|
${HOST}
| - | The hostname or IP address. |
${PORT}
| 443 | This is the TCP/IP port. For LogScale cloud deployments, SSL/TLS is enabled. |
|
| 9200 | Port 9200 is provided for compatibility with applications supporting Elastic protocol that cannot change their port configuration. |
E.U. Cloud Endpoints
| E.U. Cloud | Description |
|---|---|
cloud.humio.com:443
| Standard UI endpoint. |
cloud.humio.com:443
| Standard Falcon LogScale Collector endpoint, including when sending LogScale logs to LogScale. |
cloud.humio.com:443/api/v1/*
| Prefix for REST-based API queries for ingest, searching, lookup, actions, alerts and other APIs. |
cloud.humio.com:443/api/v1/ingest/humio-structured
| LogScale structured data ingest endpoint. |
cloud.humio.com:443/api/v1/ingest/humio-unstructured
| LogScale unstructured data ingest endpoint. |
cloud.humio.com:443/api/v1/ingest/raw
| LogScale raw data ingest endpoint. |
cloud.humio.com:443/api/v1/ingest/elastic-bulk
| Elastic Bulk endpoint. |
cloud.humio.com:443/_bulk
| Elastic Bulk endpoint. |
cloud.humio.com:9200/
| Elastic Bulk endpoint (by port). |
cloud.humio.com:443/api/v1/ingest/otlp
| OpenTelemetry endpoint. |
cloud.humio.com:443/api/v1/ingest/hec
| LogScale Event Collector API endpoint. |
cloud.humio.com:443/api/v1/ingest/hec/raw
| Raw LogScale Event Collector API endpoint. |
cloud.humio.com:443/services/collector
| LogScale Event Collector API endpoint. |
cloud.humio.com:443/services/collector/raw
| Raw LogScale Event Collector API endpoint. |
cloud.humio.com:443/graphql
| GraphQL endpoint |
U.S. Cloud
| U.S. Cloud | Description |
|---|---|
cloud.us.humio.com:443
| Standard UI endpoint. |
cloud.us.humio.com:443
| Standard Falcon LogScale Collector endpoint, including when sending LogScale logs to LogScale. |
cloud.us.humio.com:443/api/v1/*
| Prefix for REST-based API queries for ingest, searching, lookup, actions, alerts and other APIs. |
cloud.us.humio.com:443/api/v1/ingest/humio-structured
| LogScale structured data ingest endpoint. |
cloud.us.humio.com:443/api/v1/ingest/humio-unstructured
| LogScale unstructured data ingest endpoint. |
cloud.us.humio.com:443/api/v1/ingest/raw
| LogScale raw data ingest endpoint. |
cloud.us.humio.com:443/api/v1/ingest/elastic-bulk
| Elastic Bulk endpoint. |
cloud.us.humio.com:443/_bulk
| Elastic Bulk endpoint. |
cloud.us.humio.com:9200/
| Elastic Bulk endpoint (by port). |
cloud.us.humio.com:443/api/v1/ingest/otlp
| OpenTelemetry endpoint. |
cloud.us.humio.com:443/api/v1/ingest/hec
| LogScale Event Collector API endpoint. |
cloud.us.humio.com:443/api/v1/ingest/hec/raw
| Raw LogScale Event Collector API endpoint. |
cloud.us.humio.com:443/services/collector
| LogScale Event Collector API endpoint. |
cloud.us.humio.com:443/services/collector/raw
| Raw LogScale Event Collector API endpoint. |
cloud.us.humio.com:443/graphql
| GraphQL endpoint. |
CrowdStrike Datacenter
Customers of LogScale that connect to the CrowdStrike Datacenter, particularly those that use Falcon LTR will use a customer specific URL.
Important
For ingest endpoints, the $HOST
portion of your endpoint may include
ingest within the hostname. For example, where your login URL
might be:
http
CUSTOMER.logscale.us-2.crowdstrike.comThe host for ingest would be:
http
CUSTOMER.ingest.logscale.us-2.crowdstrike.com
If the ingest host is different, you will be shown this in the
Ingest tokens page.
| CrowdStrike Datacenter US 1 | Description |
|---|---|
CUSTOMER.logscale.us-1.crowdstrike.com:443
| Standard endpoint, including UI, REST, GraphQL. |
CUSTOMER.logscale.us-1.crowdstrike.com:443
| Standard Falcon LogScale Collector endpoint, including when sending LogScale logs to LogScale. |
CUSTOMER.logscale.us-1.crowdstrike.com:443
| Standard Falcon LogScale Collector endpoint, including when sending LogScale logs to LogScale. |
CUSTOMER.logscale.us-1.crowdstrike.com:443/api/v1/*
| Prefix for REST-based API queries for ingest, searching, lookup, actions, alerts and other APIs. |
CUSTOMER.logscale.us-1.crowdstrike.com:443/api/v1/ingest/humio-structured
| LogScale structured data ingest endpoint. |
CUSTOMER.logscale.us-1.crowdstrike.com:443/api/v1/ingest/humio-unstructured
| LogScale unstructured data ingest endpoint. |
CUSTOMER.logscale.us-1.crowdstrike.com:443/api/v1/ingest/raw
| LogScale raw data ingest endpoint. |
CUSTOMER.logscale.us-1.crowdstrike.com:443/api/v1/ingest/elastic-bulk
| Elastic Bulk endpoint. |
CUSTOMER.logscale.us-1.crowdstrike.com:443/_bulk
| Elastic Bulk endpoint. |
CUSTOMER.logscale.us-1.crowdstrike.com:9200/
| Elastic Bulk endpoint (by port). |
CUSTOMER.logscale.us-1.crowdstrike.com:443/api/v1/ingest/otlp
| OpenTelemetry endpoint. |
CUSTOMER.logscale.us-1.crowdstrike.com:443/api/v1/ingest/hec
| LogScale Event Collector API endpoint. |
CUSTOMER.logscale.us-1.crowdstrike.com:443/api/v1/ingest/hec/raw
| Raw LogScale Event Collector API endpoint. |
CUSTOMER.logscale.us-1.crowdstrike.com:443/services/collector
| LogScale Event Collector API endpoint. |
CUSTOMER.logscale.us-1.crowdstrike.com:443/services/collector/raw
| Raw LogScale Event Collector API endpoint. |
CUSTOMER.logscale.us-1.crowdstrike.com:443/graphql
| GraphQL endpoint. |
| CrowdStrike Datacenter US 2 | Description |
|---|---|
CUSTOMER.logscale.us-2.crowdstrike.com:443
| Standard UI endpoint. |
CUSTOMER.logscale.us-2.crowdstrike.com:443
| Standard Falcon LogScale Collector endpoint, including when sending LogScale logs to LogScale. |
CUSTOMER.logscale.us-2.crowdstrike.com:443/api/v1/*
| Prefix for REST-based API queries for ingest, searching, lookup, actions, alerts and other APIs. |
CUSTOMER.logscale.us-2.crowdstrike.com:443/api/v1/ingest/humio-structured
| LogScale structured data ingest endpoint. |
CUSTOMER.logscale.us-2.crowdstrike.com:443/api/v1/ingest/humio-unstructured
| LogScale unstructured data ingest endpoint. |
CUSTOMER.logscale.us-2.crowdstrike.com:443/api/v1/ingest/raw
| LogScale raw data ingest endpoint. |
CUSTOMER.logscale.us-2.crowdstrike.com:443/api/v1/ingest/elastic-bulk
| Elastic Bulk endpoint. |
CUSTOMER.logscale.us-2.crowdstrike.com:443/_bulk
| Elastic Bulk endpoint. |
CUSTOMER.logscale.us-2.crowdstrike.com:9200/
| Elastic Bulk endpoint (by port). |
CUSTOMER.logscale.us-2.crowdstrike.com:443/api/v1/ingest/otlp
| OpenTelemetry endpoint. |
CUSTOMER.logscale.us-2.crowdstrike.com:443/api/v1/ingest/hec
| LogScale Event Collector API endpoint. |
CUSTOMER.logscale.us-2.crowdstrike.com:443/api/v1/ingest/hec/raw
| Raw LogScale Event Collector API endpoint. |
CUSTOMER.logscale.us-2.crowdstrike.com:443/services/collector
| LogScale Event Collector API endpoint. |
CUSTOMER.logscale.us-2.crowdstrike.com:443/services/collector/raw
| Raw LogScale Event Collector API endpoint. |
CUSTOMER.logscale.us-2.crowdstrike.com:443/graphql
| GraphQL endpoint. |
| CrowdStrike Datacenter EU 1 | Description |
|---|---|
CUSTOMER.logscale.eu-1.crowdstrike.com:443
| Standard UI endpoint. |
CUSTOMER.logscale.eu-1.crowdstrike.com:443
| Standard Falcon LogScale Collector endpoint, including when sending LogScale logs to LogScale. |
CUSTOMER.logscale.eu-1.crowdstrike.com:443/api/v1/*
| Prefix for REST-based API queries for ingest, searching, lookup, actions, alerts and other APIs. |
CUSTOMER.logscale.eu-1.crowdstrike.com:443/api/v1/ingest/humio-structured
| LogScale structured data ingest endpoint. |
CUSTOMER.logscale.eu-1.crowdstrike.com:443/api/v1/ingest/humio-unstructured
| LogScale unstructured data ingest endpoint. |
CUSTOMER.logscale.eu-1.crowdstrike.com:443/api/v1/ingest/raw
| LogScale raw data ingest endpoint. |
CUSTOMER.logscale.eu-1.crowdstrike.com:443/api/v1/ingest/elastic-bulk
| Elastic Bulk endpoint. |
CUSTOMER.logscale.eu-1.crowdstrike.com:443/_bulk
| Elastic Bulk endpoint. |
CUSTOMER.logscale.eu-1.crowdstrike.com:9200/
| Elastic Bulk endpoint (by port). |
CUSTOMER.logscale.eu-1.crowdstrike.com:443/api/v1/ingest/otlp
| OpenTelemetry endpoint. |
CUSTOMER.logscale.eu-1.crowdstrike.com:443/api/v1/ingest/hec
| LogScale Event Collector API endpoint. |
CUSTOMER.logscale.eu-1.crowdstrike.com:443/api/v1/ingest/hec/raw
| Raw LogScale Event Collector API endpoint. |
CUSTOMER.logscale.eu-1.crowdstrike.com:443/services/collector
| LogScale Event Collector API endpoint. |
CUSTOMER.logscale.eu-1.crowdstrike.com:443/services/collector/raw
| Raw LogScale Event Collector API endpoint. |
CUSTOMER.logscale.eu-1.crowdstrike.com:443/graphql
| GraphQL endpoint. |