Installing Log Collector on Windows

The Windows versions which are officially supported are listed below, but the Log Collector should be compatible with most modern x86-64 systemd based Debian and RHEL type systems and modern supported Windows distributions.

  • Microsoft Windows 10 Enterprise (x86-64)

See Installing Falcon Logscale Collector on Linux for the supported versions of Linux. If you need more information on the Log Collector support for a different operating system or architecture, please get in contact with Humio Support who will note your interest.

Downloading the Log Collector

The Log Collector can be downloaded from the Humio User Interface by authenticated users. To download the Log Collector go to Organization Settings > Log Collector.

Download Page

Figure 250. Download Page


Choose the version of the Log Collector you wish to download. Humio will also generate an example configuration file based on the distribution you chose and the details of your Humio instance.

Installing the Log Collector

Once the MSI installer is downloaded, execute the installer. The installer will guide you through the installation of the Log Collector. It will also create (but not start) a Windows service for the Log Collector.

Windows MSI

Figure 251. Windows MSI


The default installation path for the Log Collector on Windows is: C:\\Program Files (x86)\\CrowdStrike\\Humio Log Collector\\humio-log-collector.exe and the default configuration file config.yaml.

Running the Log Collector Manually

You can run the following command in order to run the Log Collector manually which is useful to check that the configuration works.

logscale
C:\Program Files (x86)\CrowdStrike\Humio Log Collector>humio-log-collector.exe -h
Usage of humio-log-collector.exe:
    -cfg string
     config file
    -log-level string
     specify loglevel to enable debug logging to stderr
    -log-pretty
     print logs to console in a pretty-printed format
    -version
     print version and exit
Enabling Log Collector as Windows Service

You can set the Log Collector to run automatically at startup. To do so it is necessary to set the service Startup type to be Automatic or Automatic (Delayed Start) depending on the requirements of the collector.

Windows Service

Figure 252. Windows Service


The other service settings should also be reviewed and configured accordingly, including but not limited to the Log On options for running the Log Collector as a specific user, and the Recovery options for the desired behavior in the event of failure.

Next Steps

Once you have downloaded and installed Falcon Logscale Collector you need to: