Fleet and Group Management

Falcon LogScale Collector provides a way to manage a multiple instances of Falcon LogScale Collector throughout the organization from a central location.

These pages can be used to perform the steps required work with Falcon LogScale Collector locally or remotely (using centralized management):

Falcon LogScale Collector Data ingest tab provides a set of functionalities which allow you to monitor and manage a fleet of collector instances.

The __lc_name Fleet Management simplifies monitoring and managing multiple collector instances through two distinct approaches: Remote Configuration Management, which offers validated configuration editing and group-wide changes, or Local Configuration Management for manual file control.

There are two different approaches to managing your fleet from fleet management;

  • Fleet Management with Remote Configuration Management (recommended method) which allows you to monitor the status of your instances and;

    • manage your configuration files using an editor which validates the file as you type,

    • reuse configurations across groups of collectors which also means you can roll out a change to multiple instances easily,

    • extend configurations

    • test out new configurations without impacting log collection.

  • Fleet Management with Local Configuration files this method allows you to monitor the status of your Falcon LogScale Collector instances but manage the configuration files manually.

Fleet Overview

Figure 7. Fleet Overview