Legacy (legacy)

In legacy mode, the Falcon LogScale Collector is configured using a fleet overview snippet. The Falcon LogScale Collector sends periodic updates that are displayed in the fleet overview. This mode does not support the CPU, memory and disk usage metrics of fleet management.

This mode is not recommended for new installations. The use case of this mode has been superseded by the new auto enrollment feature with either full or localConfig mode.

ParameterTypeRequiredDefault ValueDescription
modelegacyrequired   In legacy mode, the LogScale Collector is configured using a fleet overview snippet.
proxyproxyoptional[a] auto Controls which HTTP proxy is used to communicate with LogScale in the fleet management protocol. You can use one of the configuration options or specify a proxy URL: enter a URL such as http://user:pass@proxyaddress to use a proxy.
tlstlsoptional[a] {} This object contains details on the PEM certificates. this section allows you to override the defaults. Only one of the options should be specified.
tokenstringrequired   This key specifies the token which instances of the log collector to be visualized on the Fleet and Group Management page.
urlstringrequired   URL of the Falcon LogScale installation where the fleet management page is hosted.

[a] Optional parameters use their default value unless explicitly set.

ParameterTypeRequiredDefault ValueDescription
caCertstringoptional[a]   Use this key to specify a PEM certificate in the config file.
caFilestringoptional[a]   Specify this key to load the PEM certificate from an external file.
insecurebooleanoptional[a] false Set to true to skip certificate validation.

[a] Optional parameters use their default value unless explicitly set.