Create a Configuration - Local

The following steps describe how to edit the configuration file in the case of local management, this can only be used for instances that have not been enrolled, see Enroll Instances for more information.

If you want to create a remote configuration file see Manage Remote Configurations.

  1. Open the file config.yaml to edit using the editor of your choice, for example on Linux:

    shell
    $ sudo vi /etc/humio-log-collector/config.yaml

    The file can be found in:

    • Linux (full)

      /etc/logscale-log-collector/config.yaml

    • Linux (Custom)

      /etc/humio-log-collector/config.yaml

    • Windows(Full)

      C:\\Program Files (x86)\\CrowdStrike\\Logscale Log Collector\\config.yaml

    • Windows(Custom)

      C:\\Program Files (x86)\\CrowdStrike\\Humio Log Collector\\config.yaml

    • MacOS

      /usr/local/etc/logscale-collector/config.yaml

  2. Edit the file and specify the fields and values described in Configuration Examples or you can try out data ingestion by specifying:

  3. Once you have finished making changes save the file and restart the service.

    Linux (custom)
    shell
    $ sudo systemctl restart humio-log-collector.service
    macOS
    shell
    $ sudo launchctl kickstart -k system/com.crowdstrike.logscale-collector
    Windows

    Got to Services and find Humio Log Collector and right click Restart.

Additional environment variables can be configured, see Troubleshooting