Falcon LogScale

Edit online

Instana supports integrating logs with Falcon LogScale. After you enable the integration, you are redirected to the Falcon LogScale UI from the Instana UI to view logs that are stored in LogScale. This integration enables a fluid workflow between Instana and LogScale.

Configuring LogScale log integration

You can configure Instana to integrate with logs that are stored in LogScale. Follow the steps:

  1. From the navigation menu in the Instana UI, select Settings > Integrations > Logging > LogScale .

  2. Configure your Falcon LogScale integration as follows:

    • In the LogScale Instance field, enter the URL or the IP address (including the port number) of the deployed instance where the logs are stored.
    • In the View or repository field, enter the name of the view or repository you have configured in the LogScale platform.
    Figure 1. LogScale form
    LogScale form
  3. By default, LogScale integration is not enabled. To enable and show the LogScale link on hosts, containers, and pods, click Save and enable.

Accessing LogScale from the Instana UI

To access LogScale, click LogScale from each of these dashboards:

  • Kubernetes:
    • Host
    • Pod
    • Docker container
  • Host

If multiple log providers are integrated, click Go to Logs > Falcon Log Scale .

Figure 2. Falcon LogScale
Falcon LogScale

Accessing Instana from LogScale

Use either of the following options to enable accessing Instana-related entities from your logs:

  • Adjust your current search query:

    writeJson([host, @host, hostname, kubernetes.host, docker.container_id, kubernetes.docker_id, kubernetes.pod_name, @timestamp])
|  format("https://<ENVIRONMENT_URL_HERE>/#/integration/landing;config=%s", field=_json, as=link)
|  table([@timestamp, @rawstring, link])
  • Create a new dashboard by completing the following steps:
    1. Go to the Dashboards section in LogScale.
    2. Click Add Dashboard.
    3. Enter a name, and then select Template File.
    4. Upload a file with the following content, and then click Create Dashboard.
    name: LogScale to Instana
widgets:
  eaea3c0e-7ca1-420c-a35a-150c67ea44f7:
    x: 0
    y: 0
    description: ''
    height: 10
    queryString: writeJson([host, @host, hostname, kubernetes.host, docker.container_id, kubernetes.docker_id, kubernetes.pod_name, @timestamp]) | format("https://<ENVIRONMENT_URL_HERE>/#/integration/landing;config=%s", field=_json, as=link) | table([@timestamp, @rawstring, link])
    visualization: table-view
    title: Instana
    type: query
    start: 24h
    width: 12
parameters:
  new-param:
    defaultValue: '*'
    order: 50
    type: text