Installing LogScale Collector on macOS

The OS versions which are officially supported are listed below.

  • macOS 12 Monterey

  • macOS 13 Ventura

Downloading and Installing the Log Collector

The Log Collector can be downloaded from the LogScale User Interface by authenticated users.

For information on downloading the installer through the command-line, see Downloading Installers from the Command-line.

  1. Go to Data ingest> LogScale Collector download.

  2. Select the required package from the drop down menu.

  3. Click Download installer.

    Download Page

    Figure 2. Download Page


  4. Double click the installer downloaded in previous step.

  5. You can use the following command to run and enroll your Log Collector in Managing Your Fleet and specify the enrollment token.

    shell
    $ sudo logscale-collector enroll enrolltoken

    If you want to manage your configuration manually you must follow the steps described in, Running LogScale Collector Manually on macOS

    Note

    Errors and warnings are logged to /var/log/logscale-collector/main.log

Next Steps

Once you have downloaded and installed Falcon LogScale Collector you need to:

Running LogScale Collector Manually on macOS

The following procedures describe how to perform a set of optional manual steps, which allow you to:

Running the LogScale Collector from Command Line

You can manually run Falcon LogScale Collector on macOS, this procedure is required if you do not want to enroll your LogScale Collector in Managing Your Fleet.

shell
$ logscale-collector -cfg /usr/local/etc/logscale-collector/config.yaml
Running LogScale Collector as a LaunchDeamon (service)

You can run the following command to automatically starts the LogScale Collector as LaunchDaemon (background service).

shell
$  sudo launchctl load -w /Library/LaunchDaemons/com.crowdstrike.logscale-collector.plist