CrowdStrike Falcon LogScale HEC
Use this output type to send NFO data to CrowdStrike Falcon LogScale HEC input. For details on configuring CrowdStrike Falcon LogScale HEC ingesting, visit: https://library.humio.com/logscale-api/log-shippers-hec.html
| Parameter | Description |
|---|---|
| Protocol | HTTP or HTTPS |
| Address | Destination IP address where NFO sends events for CrowdStrike Falcon LogScale HEC |
| Port | Destination port number |
| Format | Syslog or JSON |
| Access token | LogScale HEC Ingest token |
| CAcert file name | CA certificate file name (pem), for HTTPS option |
| Max batch size | Buffer size in bytes. When the number of bytes in the buffer reached its size NFO data is pushed out |
| Flush timeout | Time in msec when NFO data is sent out, even if the batch size is not reached its maximum |