User Interface Components

LogScale's user interface is designed to be simple and easy to navigate.

After deploying LogScale and signing in, LogScale opens to a menu of your available Repositories and views. You will also see menu options to select All dashboards and Fleet management. We will cover these later:

From the opening screen, you can also read documentation about setting up a repository and sending logs, have a high-level overview of LogScale, or join the CrowdStrike Community:

After clicking on a repository, you'll see the Query editor at the top of the screen:

Just above the Query editor is the Widget selector and Queries dropdown:

To the right of the Widget and Queries menus, you will see the Time zone dropdown, the Time selector , the live data selector, and the Run button:

At the bottom left of the UI is the Status bar, responsible for showing your query's completion status, how many hits were found, query speed (measured by GB per second), Events Per Second (EPS), CPU usage and memory allocation, and percentage of completion:

The Dashboards tab takes you to a collection of all your stored dashboards, that are made using widgets, and the option to create new dashboards:

The Alerts tab shows you your stored alerts, and an option to create new alerts:

The Parsers tab shows you a list of built-in parsers for your use, and the option to create new parsers based on your need:

The Files tab is where you can find a list of your uploaded .CSV files, which you can use in conjunction with their imported metadata to enrich or filter your results using the match() query function:

The Settings tab is the central location for variety of settings related to your repository:

To access your notifications, LogScale's latest release notes, the help menu, or your account information, click the Notifications, Releases, Help, or Account icons at the top right:

To return to the Repositories and views menu, click the Falcon at the top left of the screen: