CrowdStrike Falcon LogScale is an AI-powered SIEM and log management platform released in 2017. It provides organizations with powerful advantages for their log management and SIEM needs in the complex and ever-changing cyber security environment. LogScale is used in a variety of industries, including financial services, healthcare, retail, manufacturing and government.
What is CrowdStrike Falcon® LogScale Platform?
CrowdStrike Falcon LogScale is a cloud-based log management and analytics platform. The Falcon platform is a comprehensive cybersecurity solution that provides a range of features and capabilities to protect organisations from cyber threats.
Falcon LogScale is designed to help organisations collect, store and analyse log data from a wide variety of sources, including security appliances, servers, applications and more. With LogScale, users can more easily identify and analyse security events, troubleshoot problems and monitor their environment for potential threats by centralising and standardising log data.
The CrowdStrike Falcon® platform, powered by CrowdStrike Security Cloud, leverages real-time attack indicators, threat intelligence on evolving adversary trading, and enriched telemetry across the enterprise to deliver hyper-accurate detections, automated protection and remediation, elite threat hunting, and prioritised observability of vulnerabilities through a single, lightweight agent. With CrowdStrike, customers benefit from superior protection, better performance, reduced complexity and immediate time-to-value.
Security logging at petabyte scale
A powerful, index-free architecture lets you log all your data and retain it for years while avoiding ingestion bottlenecks.
- Collect more data for threat hunting and investigations.
- Scale to over 1 PB of data ingestion per day with negligible data loss or performance impact.
- Choose between cloud-native or self-hosted deployment.
Real-time search to outpace adversaries
Aggregate, alert on, and visualize live data as it streams into Falcon LogScale. Monitor the health of your systems, detect threats immediately, and identify issues early.
- Get real-time alerting, search, and visualization.
- Achieve sub-second latency, even with complex queries.
- View graphical dashboards with live data.
360° visibility to eliminate blind spots
Consolidate all of your data to break down silos and meet your security and observability requirements with one solution.
- Let security, IT, and DevOps teams hunt for threats, monitor performance, and achieve compliance.
- Search across 3 billion events in less than 1 second.
- Easily query any field with free text search.