Skip to content
LogoLogScale DocumentationFull Library Knowledge Base Release Notes Integrations Query Examples Training API GraphQL APISearch Archives Contacting Support
Help button for documentation
    • Terminology Reference
      • API (Application Programming Interface)
      • Actions
      • Aggregate Alert
      • Aggregation
      • Alert
      • Anomaly Detection
      • Archival
      • Asset
      • Authentication
      • Authorization
      • Automated Actions
      • Backfilling
      • Backup
      • Baseline
      • Bloom Filter
      • Bucket
      • Built-in Parsers
      • Cardinality
      • Cluster
      • Cluster Management
      • Cold Storage
      • Compression
      • Configuration
      • Correlation
      • CrowdStrike Parsing Standard (CPS)
      • CrowdStrike Query Language
      • Dashboard
      • Data Export
      • Data Ingestion
      • Data Retention
      • Datasource
      • Deployment
      • Dynamic Configuration
      • Endpoint
      • Enrichment
      • Environment Variables
      • Event
      • Event Fields
      • Event List
      • Extraction
      • Field
      • Field Aliasing
      • Field Data Types
      • Field Mapping
      • Field Panel
      • Filter
      • Filter Alert
      • Format Panel
      • Function
      • GraphQL
      • Groups
      • Histogram
      • Hot Storage
      • Humio Operator
      • HumioCluster
      • Identity Provider (IdP)
      • Indexing
      • Ingest Token
      • Ingestion
      • Inspection Panel
      • Installation
      • Integration
      • Join
      • Kubernetes
      • LDAP (Lightweight Directory Access Protocol)
      • Live Query
      • Log Shipper
      • LogScale Query Language
      • Lookup Table
      • Memory Limits
      • Metadata
      • Metadata Fields
      • Monitoring
      • Multi-Cluster View
      • Multi-Cluster-Search
      • Node
      • Notification
      • OAuth
      • OpenID Connect
      • Operator
      • Organization
      • Parser
      • Permissions
      • Pipeline
      • Proxy Authentication
      • Query
      • Query Coordinator
      • Query Editor
      • RBAC (Role-Based Access Control)
      • REST API
      • Real-time
      • Regex (Regular Expression)
      • Repository
      • Repository Permissions
      • Result
      • Reverse Proxy
      • SAML (Security Assertion Markup Language)
      • SIEM (Security Information and Event Management)
      • Saved Search
      • Scheduled Search
      • Search
      • Security
      • Segment
      • Tag
      • Template Language
      • Threshold
      • Throttling Period
      • TimeChart
      • Token
      • Transformation
      • Triggers
      • User Interface (UI)
      • View
      • View-based Access Control
      • Visualization
      • Webhook
      • Widget
      • Worker Node
      • groupBy()
      • @ingesttimestamp
      • @timestamp
Falcon LogScale Documentation
/ LogScale Terminology

LogScale Query Language

The proprietary query syntax for searching and analyzing data in LogScale.

Related Content

  • CrowdStrike Query Language Syntax

Related Terms

  • Search Interface

  • Search Templates

  • CrowdStrike Query Language

Support
  • Twitter
  • LinkedIn
  • Youtube

© 2025 CrowdStrike All other marks contained herein are the property of their respective owners.

  • Other articles on this topic

    • CrowdStrike Query Language Syntax

Enter search term