For a self-hosted Humio cluster, you first need to enable FDR polling
and ingest in the configuration of at least one Humio node using
This feature makes it easy to ingest Falcon Data Replicator (FDR) data into Humio without having to set up log shippers.
You also need to enable the feature flag
enable features see Enabling/Disabling Features.