Configure Falcon LogScale Collector

The Falcon LogScale Collector configuration can be managed either:

  • Remotely (recommended) in a managed mode which provides a set of functionalities to centrally manage your configurations, and assign a single configuration to multiple instances.

  • Locally by manually editing the .yaml file:

    You can also use the GraphQL API to manage configurations:

    • To create a configuration, use the createLogCollectorConfiguration() mutation.

    • To delete a configuration, use the deleteLogCollectorConfiguration() mutation.

    • To get information on a configuration, use the logCollectorConfiguration() query.