Instance Administration
Once Falcon LogScale software is installed and running, there is not much to do beyond querying and managing the data. However, as an administrator, you want to monitor users, their usage and ensure you are in compliance with your licensing limitations.
Although you may have been careful in designating users and setting permissions, you may want to monitor their activities — in particular their queries. This section provides information on how to monitor queries, set quotas, and even block some queries.
Multi-cluster support allows queries to be distributed across multiple clusters and returned within a single view.
Cluster statistics provides an overview of basic information about the cluster and storage statistics.
Data retention describes the concepts for data retention in LogScale.
Dynamic Configuration Parameters
Dynamic configuration parameters give you a way to administer and control certain parts of LogScale. This page describes all of the dynamic configuration variables and their default settings.
Updating LogScale covers the methods for upgrading or updating your LogScale instance.
For information on releases see Release Notes. Self-hosted customers should use the release as noted in Generally Available (GA) & Long Term Support (LTS) Releases.
LogScale primarily records your server logs. However, it can be useful to log information on the activities of LogScale itself. This section describes how to do that.
In addition to server logs and metrics sent to it, LogScale records all of its activities: user logins – and failed logins; the IP address of clients that viewed dashboards; etc. This section provides details on these internal logs, on this special repository.
Since there's always the threat of unauthorized access to LogScale or just inadvertent server problems, you should replicate LogScale's logs on another server running LogScale. That way you can determine who and what went wrong if your primary LogScale installation is hacked or deleted.
You can start using LogScale with a trial license, but eventually you'll need to purchase a license. These sections provide information on managing a license.
After you buy a license to use LogScale on a self-hosted system, you'll be given a license key. This page describes what to do with that key.
The Falcon LogScale license is based on usage, the amount of data ingested. This section provides information on how usage is calculated and how to control usage — and eliminate unnecessary usage.
For information on how SaaS upgrades and releases are made, see Generally Available (GA) & Long Term Support (LTS) Releases.