LogScale URLs & Endpoints
Within LogScale and the documentation, we denote the base URL of your
LogScale installation as $YOUR_LOGSCALE_URL. The tables
below list some commonly used endpoints, primarily for ingest, based on
$YOUR_LOGSCALE_URL, as well as the URLs of our cloud
environments.
Note
The IP addresses associated with the hostname(s) used to access LogScale are not static and may be subject to change, although changes are infrequent.
Important
For ingest-related endpoints, the $HOST portion of your
endpoint may include the word ingest within the hostname. If
the ingest URL is different, the full ingest url will be displayed at the
top of the Ingest tokens page.
| URL Template | Description |
|---|---|
${HOST}:${PORT}
| Standard UI endpoint. |
${HOST}:${PORT}
| Standard Falcon LogScale Collector endpoint, including when sending LogScale logs to LogScale. |
${HOST}:${PORT}/api/v1/*
| Prefix for REST-based API queries for ingest, searching, lookup, actions, alerts and other APIs. |
${HOST}:${PORT}/api/v1/ingest/humio-structured
| LogScale structured data ingest endpoint. |
${HOST}:${PORT}/api/v1/ingest/humio-unstructured
| LogScale unstructured data ingest endpoint. |
${HOST}:${PORT}/api/v1/ingest/raw
| LogScale raw data ingest endpoint. |
${HOST}:${PORT}/api/v1/ingest/json
| LogScale raw JSON ingest endpoint. |
${HOST}:${PORT}/api/v1/ingest/elastic-bulk
| Elastic Bulk endpoint. |
${HOST}:${PORT}/_bulk
| Elastic Bulk endpoint. |
${HOST}:${ELASTIC_PORT}/
| Elastic Bulk endpoint (by port). |
${HOST}:${PORT}/api/v1/ingest/otlp
| OpenTelemetry endpoint. |
${HOST}:${PORT}/api/v1/ingest/hec
| LogScale Event Collector API endpoint. |
${HOST}:${PORT}/api/v1/ingest/hec/raw
| Raw LogScale Event Collector API endpoint. |
${HOST}:${PORT}/services/collector
| LogScale Event Collector API endpoint. |
${HOST}:${PORT}/services/collector/raw
| Raw LogScale Event Collector API endpoint. |
${HOST}:${PORT}/graphql
| GraphQL endpoint |
The table below explains the placeholders above. Note that
${HOST}:${PORT} is the equivalent of
$YOUR_LOGSCALE_URL.
| Component | Default | Description |
|---|---|---|
${HOST}
| - | The hostname or IP address. |
${PORT}
| 443 | This is the TCP/IP port. For LogScale cloud deployments, SSL/TLS is enabled. |
|
| 9200 | Port 9200 is provided for compatibility with applications supporting Elastic protocol that cannot change their port configuration. |
E.U. Cloud Endpoints
| E.U. Cloud | Description |
|---|---|
cloud.humio.com:443
| Standard UI endpoint. |
cloud.humio.com:443
| Standard Falcon LogScale Collector endpoint, including when sending LogScale logs to LogScale. |
cloud.humio.com:443/api/v1/*
| Prefix for REST-based API queries for ingest, searching, lookup, actions, alerts and other APIs. |
cloud.humio.com:443/api/v1/ingest/humio-structured
| LogScale structured data ingest endpoint. |
cloud.humio.com:443/api/v1/ingest/humio-unstructured
| LogScale unstructured data ingest endpoint. |
cloud.humio.com:443/api/v1/ingest/raw
| LogScale raw data ingest endpoint. |
cloud.humio.com:443/api/v1/ingest/elastic-bulk
| Elastic Bulk endpoint. |
cloud.humio.com:443/_bulk
| Elastic Bulk endpoint. |
cloud.humio.com:9200/
| Elastic Bulk endpoint (by port). |
cloud.humio.com:443/api/v1/ingest/otlp
| OpenTelemetry endpoint. |
cloud.humio.com:443/api/v1/ingest/hec
| LogScale Event Collector API endpoint. |
cloud.humio.com:443/api/v1/ingest/hec/raw
| Raw LogScale Event Collector API endpoint. |
cloud.humio.com:443/services/collector
| LogScale Event Collector API endpoint. |
cloud.humio.com:443/services/collector/raw
| Raw LogScale Event Collector API endpoint. |
cloud.humio.com:443/graphql
| GraphQL endpoint |
U.S. Cloud
| U.S. Cloud | Description |
|---|---|
cloud.us.humio.com:443
| Standard UI endpoint. |
cloud.us.humio.com:443
| Standard Falcon LogScale Collector endpoint, including when sending LogScale logs to LogScale. |
cloud.us.humio.com:443/api/v1/*
| Prefix for REST-based API queries for ingest, searching, lookup, actions, alerts and other APIs. |
cloud.us.humio.com:443/api/v1/ingest/humio-structured
| LogScale structured data ingest endpoint. |
cloud.us.humio.com:443/api/v1/ingest/humio-unstructured
| LogScale unstructured data ingest endpoint. |
cloud.us.humio.com:443/api/v1/ingest/raw
| LogScale raw data ingest endpoint. |
cloud.us.humio.com:443/api/v1/ingest/elastic-bulk
| Elastic Bulk endpoint. |
cloud.us.humio.com:443/_bulk
| Elastic Bulk endpoint. |
cloud.us.humio.com:9200/
| Elastic Bulk endpoint (by port). |
cloud.us.humio.com:443/api/v1/ingest/otlp
| OpenTelemetry endpoint. |
cloud.us.humio.com:443/api/v1/ingest/hec
| LogScale Event Collector API endpoint. |
cloud.us.humio.com:443/api/v1/ingest/hec/raw
| Raw LogScale Event Collector API endpoint. |
cloud.us.humio.com:443/services/collector
| LogScale Event Collector API endpoint. |
cloud.us.humio.com:443/services/collector/raw
| Raw LogScale Event Collector API endpoint. |
cloud.us.humio.com:443/graphql
| GraphQL endpoint. |
CrowdStrike Datacenter
Customers of LogScale that connect to the CrowdStrike Datacenter, particularly those that use Falcon LTR will use a customer specific URL.
Important
For ingest endpoints, the $HOST portion of your
endpoint may include ingest within the
hostname. For example, where your login URL might be:
http
CUSTOMER.logscale.us-2.crowdstrike.comThe host for ingest would be:
http
CUSTOMER.ingest.logscale.us-2.crowdstrike.com
If the ingest host is different, you will be shown this in the
Ingest tokens page.
| CrowdStrike Datacenter US 1 | Description |
|---|---|
CUSTOMER.logscale.us-1.crowdstrike.com:443
| Standard endpoint, including UI, REST, GraphQL. |
CUSTOMER.logscale.us-1.crowdstrike.com:443
| Standard Falcon LogScale Collector endpoint, including when sending LogScale logs to LogScale. |
CUSTOMER.logscale.us-1.crowdstrike.com:443
| Standard Falcon LogScale Collector endpoint, including when sending LogScale logs to LogScale. |
CUSTOMER.logscale.us-1.crowdstrike.com:443/api/v1/*
| Prefix for REST-based API queries for ingest, searching, lookup, actions, alerts and other APIs. |
CUSTOMER.logscale.us-1.crowdstrike.com:443/api/v1/ingest/humio-structured
| LogScale structured data ingest endpoint. |
CUSTOMER.logscale.us-1.crowdstrike.com:443/api/v1/ingest/humio-unstructured
| LogScale unstructured data ingest endpoint. |
CUSTOMER.logscale.us-1.crowdstrike.com:443/api/v1/ingest/raw
| LogScale raw data ingest endpoint. |
CUSTOMER.logscale.us-1.crowdstrike.com:443/api/v1/ingest/elastic-bulk
| Elastic Bulk endpoint. |
CUSTOMER.logscale.us-1.crowdstrike.com:443/_bulk
| Elastic Bulk endpoint. |
CUSTOMER.logscale.us-1.crowdstrike.com:9200/
| Elastic Bulk endpoint (by port). |
CUSTOMER.logscale.us-1.crowdstrike.com:443/api/v1/ingest/otlp
| OpenTelemetry endpoint. |
CUSTOMER.logscale.us-1.crowdstrike.com:443/api/v1/ingest/hec
| LogScale Event Collector API endpoint. |
CUSTOMER.logscale.us-1.crowdstrike.com:443/api/v1/ingest/hec/raw
| Raw LogScale Event Collector API endpoint. |
CUSTOMER.logscale.us-1.crowdstrike.com:443/services/collector
| LogScale Event Collector API endpoint. |
CUSTOMER.logscale.us-1.crowdstrike.com:443/services/collector/raw
| Raw LogScale Event Collector API endpoint. |
CUSTOMER.logscale.us-1.crowdstrike.com:443/graphql
| GraphQL endpoint. |
| CrowdStrike Datacenter US 2 | Description |
|---|---|
CUSTOMER.logscale.us-2.crowdstrike.com:443
| Standard UI endpoint. |
CUSTOMER.logscale.us-2.crowdstrike.com:443
| Standard Falcon LogScale Collector endpoint, including when sending LogScale logs to LogScale. |
CUSTOMER.logscale.us-2.crowdstrike.com:443/api/v1/*
| Prefix for REST-based API queries for ingest, searching, lookup, actions, alerts and other APIs. |
CUSTOMER.logscale.us-2.crowdstrike.com:443/api/v1/ingest/humio-structured
| LogScale structured data ingest endpoint. |
CUSTOMER.logscale.us-2.crowdstrike.com:443/api/v1/ingest/humio-unstructured
| LogScale unstructured data ingest endpoint. |
CUSTOMER.logscale.us-2.crowdstrike.com:443/api/v1/ingest/raw
| LogScale raw data ingest endpoint. |
CUSTOMER.logscale.us-2.crowdstrike.com:443/api/v1/ingest/elastic-bulk
| Elastic Bulk endpoint. |
CUSTOMER.logscale.us-2.crowdstrike.com:443/_bulk
| Elastic Bulk endpoint. |
CUSTOMER.logscale.us-2.crowdstrike.com:9200/
| Elastic Bulk endpoint (by port). |
CUSTOMER.logscale.us-2.crowdstrike.com:443/api/v1/ingest/otlp
| OpenTelemetry endpoint. |
CUSTOMER.logscale.us-2.crowdstrike.com:443/api/v1/ingest/hec
| LogScale Event Collector API endpoint. |
CUSTOMER.logscale.us-2.crowdstrike.com:443/api/v1/ingest/hec/raw
| Raw LogScale Event Collector API endpoint. |
CUSTOMER.logscale.us-2.crowdstrike.com:443/services/collector
| LogScale Event Collector API endpoint. |
CUSTOMER.logscale.us-2.crowdstrike.com:443/services/collector/raw
| Raw LogScale Event Collector API endpoint. |
CUSTOMER.logscale.us-2.crowdstrike.com:443/graphql
| GraphQL endpoint. |
| CrowdStrike Datacenter EU 1 | Description |
|---|---|
CUSTOMER.logscale.eu-1.crowdstrike.com:443
| Standard UI endpoint. |
CUSTOMER.logscale.eu-1.crowdstrike.com:443
| Standard Falcon LogScale Collector endpoint, including when sending LogScale logs to LogScale. |
CUSTOMER.logscale.eu-1.crowdstrike.com:443/api/v1/*
| Prefix for REST-based API queries for ingest, searching, lookup, actions, alerts and other APIs. |
CUSTOMER.logscale.eu-1.crowdstrike.com:443/api/v1/ingest/humio-structured
| LogScale structured data ingest endpoint. |
CUSTOMER.logscale.eu-1.crowdstrike.com:443/api/v1/ingest/humio-unstructured
| LogScale unstructured data ingest endpoint. |
CUSTOMER.logscale.eu-1.crowdstrike.com:443/api/v1/ingest/raw
| LogScale raw data ingest endpoint. |
CUSTOMER.logscale.eu-1.crowdstrike.com:443/api/v1/ingest/elastic-bulk
| Elastic Bulk endpoint. |
CUSTOMER.logscale.eu-1.crowdstrike.com:443/_bulk
| Elastic Bulk endpoint. |
CUSTOMER.logscale.eu-1.crowdstrike.com:9200/
| Elastic Bulk endpoint (by port). |
CUSTOMER.logscale.eu-1.crowdstrike.com:443/api/v1/ingest/otlp
| OpenTelemetry endpoint. |
CUSTOMER.logscale.eu-1.crowdstrike.com:443/api/v1/ingest/hec
| LogScale Event Collector API endpoint. |
CUSTOMER.logscale.eu-1.crowdstrike.com:443/api/v1/ingest/hec/raw
| Raw LogScale Event Collector API endpoint. |
CUSTOMER.logscale.eu-1.crowdstrike.com:443/services/collector
| LogScale Event Collector API endpoint. |
CUSTOMER.logscale.eu-1.crowdstrike.com:443/services/collector/raw
| Raw LogScale Event Collector API endpoint. |
CUSTOMER.logscale.eu-1.crowdstrike.com:443/graphql
| GraphQL endpoint. |