Instance Administration
After Falcon LogScale software is installed and running, you can query and manage data. As an administrator, you can monitor users and their usage to ensure you are in compliance with licensing limitations. The various administration tasks include:
General Administrative InformationData retention describes the concepts for data retention in LogScale.
Archiving covers the setup and configuration of archiving storage, as well as file format and tag grouping.
Multi-cluster support allows queries to be distributed across multiple clusters and returned within a single view.
LogScale primarily records your server logs. You can also log information on LogScale activities. This section describes how to do that.
LogScale records all of its activities. This includes user logins, failed logins, and IP addresses of clients that viewed dashboards. This section provides details on these internal logs in this special repository.
Replicate LogScale logs on another server running LogScale. If your primary LogScale installation is compromised or experiences problems, you can review the replicated logs. This lets you determine what went wrong and who was involved.
As an administrator, you will want to monitor system health, ingest, and performance.
Measure and Manage Ingest Usage
The Falcon LogScale license is based on usage, the amount of data ingested. This section provides information on how usage is calculated and how to control usage — and eliminate unnecessary usage.
Cluster statistics shows an overview of basic information about the cluster and storage statistics.