Skip to content

LogScale Documentation Library Guidance Release Notes Integrations Query Examples Training API GraphQL Search Archives Contact Support

Versions of this Page

Terminology Reference

Falcon LogScale Documentation

/ LogScale Terminology

Terminology Reference

© 2026 CrowdStrike All other marks contained herein are the property of their respective owners.

Children of this Page

Aggregate Alert

Anomaly Detection

API (Application Programming Interface)

Arrays of Arrays

Arrays of Objects

Asset Permissions

Automated Actions

Automatic user provisioning

Built-in Parsers

Cluster Management

CrowdStrike Query Language (CQL)

CrowdStrike Parsing Standard (CPS)

Custom Resource Definitions (CRD)

Data Visualization

Dynamic Configuration

Environment Variables

Ephemeral User Token

externalQueryId

Field Data Types

Format Event List Panel

Group synchronization

Identity Provider (IdP)

@ingesttimestamp

Inspection Panel

LDAP (Lightweight Directory Access Protocol)

License Management

LogScale Query Language (CQL)

Multi-Cluster-Search

Multi-Cluster View

Metadata Fields

Multi-Cluster Search

Non-Sensitive Events

OpenID Connect (OIDC)

Organization-owned queries

Organization Owner

Persistent queries

Proxy Authentication

Query Coordinator

Query Profiling

RBAC (Role-Based Access Control)

Regex (Regular Expression)

Regular Expression Engine V2

Repository Permissions

Security Assertion Markup Language (SAML)

Scheduled Search

Search Interface

Security Policies

Sensitive Events

SIEM (Security Information and Event Management)

Structured Array Syntax

Template Language

Throttling Period

Time Interval Selector

Timestamp Parsing

User Interface (UI)

User Management

View-based Access Control

Widget Selector

Enter search term