Installing LogScale Collector on Windows

The Windows versions which are officially supported are listed below, but the LogScale Collector should be compatible with most modern supported Windows distributions.

  • Microsoft Windows Server 2016

  • StandardMicrosoft Windows Server 2019 Standard

  • Microsoft Windows Server 2022 Standard

  • Microsoft Windows 10 Enterprise

  • Microsoft Windows 11 Enterprise

See Installing LogScale Collector on Linux for the supported versions of Linux. If you need more information on the LogScale Collector support for a different operating system or architecture, please get in contact with LogScale Support who will note your interest.

Downloading the LogScale Collector

The LogScale Collector can be downloaded from the LogScale User Interface by authenticated users. To download the LogScale Collector go to Fleet management > LogScale Collector Download.

Download Page

Figure 287. Download Page


Choose the version of the LogScale Collector you wish to download.

Installing the Falcon LogScale Collector

Once the MSI installer is downloaded, execute the installer. The installer will guide you through the installation of the LogScale Collector. It will also create (but not start) a Windows service for the LogScale Collector.

Windows MSI

Figure 288. Windows MSI


The default installation path for the LogScale Collector on Windows is: C:\\Program Files (x86)\\CrowdStrike\\Humio Log Collector\\humio-log-collector.exe and the default configuration file config.yaml.

Running the LogScale Collector Manually

You can run the following command in order to run the LogScale Collector manually which is useful to check that the configuration works.

logscale
C:\Program Files (x86)\CrowdStrike\Humio Log Collector>humio-log-collector.exe -h
Usage of humio-log-collector.exe:
    --cfg string
     config file
    --log-level string
     specify loglevel to enable debug logging to stderr
    --log-pretty
     print logs to console in a pretty-printed format
    --version
     print version and exit
Enabling LogScale Collector as Windows Service

You can set the LogScale Collector to run automatically at startup. To do so it is necessary to set the service Startup type to be Automatic or Automatic (Delayed Start) depending on the requirements of the collector.

Windows Service

Figure 289. Windows Service


The other service settings should also be reviewed and configured accordingly, including but not limited to the Log On options for running the LogScale Collector as a specific user, and the Recovery options for the desired behavior in the event of failure.

Next Steps

Once you have downloaded and installed Falcon LogScale Collector you need to: