Custom Falcon LogScale Collector Installation

The documentation provides instructions for performing a custom installation of the Falcon LogScale Collector using installers across Linux, macOS, and Windows operating systems. The guide explains how to download the collector through the LogScale User Interface or command line, and highlights important service naming differences between installation methods, with custom installations using the service name 'humio-log-collector' rather than 'logscale-collector'.

Available:Custom Install v1.136.0

The installation method provided in versions prior to 1.136 of LogScale is now called Custom.

Important

The name of the Falcon LogScale Collector service varies:

  • If you use Full Installation the service is called logscale-collector,

  • If you installed using Custom Installation or a version prior to 1.361.1 of LogScale the service name is humio-log-collector. This does not apply to macOS.

The following sections describe how to download install Log Collector using the installers (Custom install) and curl commands on the Prerequisites - Supported Operating Systems. See, Sizing Guide for information on how to size instances.

Download Falcon LogScale Collector and Install - Custom

The Falcon LogScale Collector can be downloaded from the LogScale User Interface by authenticated users. To download the Falcon LogScale Collector go to Data ingest> Falcon LogScale Collector download.

For information on downloading the installer through the command-line, see Download Installers from the Command-line.

Download Page

Figure 2. Download Page


  1. Select Custom install. Manage Versions - Groups centrally can only be used if you use Full install.

  2. Follow the steps on the panel:

    1. Select if you want to manage the configuration remotely using the UI or locally.

    2. Select the the required Falcon LogScale Collector Installation.

    3. Select an enrollment token from the dropdown menu or leave the default.

    4. Copy, paste and run the command in the terminal of your machine to enroll the instances in Fleet Management.

    5. View your instance on Fleet Overview page.

    6. Copy, paste and run the curl command in the terminal of your machine to download and install Falcon LogScale Collector. This command manually performs the steps to configure the environment for Falcon LogScale Collector. To perform these steps manually see

    7. View your instance on Fleet Overview page.

  3. You can now configure your Falcon LogScale Collector, for more information see Configuration.