CrowdStrike LogScale

introduction this guide tells you how to authenticate the crowdstrike logscale connector in swimlane using http bearer authentication you will generate an api token in crowdstrike logscale, collect the required connection details, and configure the connector in swimlane prerequisites crowdstrike logscale access requirements you must have permissions to access the crowdstrike logscale portal create and manage api tokens access the logscale rest apis read or manage repositories based on your intended use required credentials during setup, you will collect credential description url base url of your crowdstrike logscale instance token api bearer token used for authentication crowdstrike logscale setup take the following steps to generate an api token log in to your crowdstrike logscale instance click your user profile navigate to api tokens or personal access tokens click create token enter a descriptive name for the token assign the appropriate permissions required for your workflows click create copy and securely save the generated token this saved value is your bearer token take the following steps to collect the logscale url log in to your crowdstrike logscale instance copy the url displayed in your browser example cloud https //cloud us humio com self hosted https //logscale company com use this value as the url during connector configuration connector configuration in swimlane log in to turbine from the left hand navigation pane, click orchestration and click assets asset homepage opens click the plus icon to open the configure your connector asset window select crowdstrike logscale from the asset type list fill in the asset settings and asset input as shown field description required/optional url crowdstrike logscale instance url required token bearer api token required verify ssl enable/disable ssl verification optional http proxy optional proxy configuration optional fields with marks are required click create the connector authenticates using an http bearer token the token is sent in the authorization header as a bearer token ensure the token has permissions appropriate for the actions you intend to perform repository level permissions determine which repositories and apis the connector can access troubleshooting authentication failed (401 unauthorised) verify that the bearer token is valid the token has not expired or been revoked the url points to the correct crowdstrike logscale instance there are no extra spaces when copying the token permission denied (403 forbidden) verify that the api token has sufficient permissions your account has access to the required repositories your organisation allows api access for your user account ssl errors if ssl verification fails verify that the logscale ssl certificate is trusted confirm that any corporate proxy or firewall is not intercepting ssl traffic temporarily disable verify ssl only for testing if permitted by your organisation's security policy result you have successfully authenticated the crowdstrike logscale connector in swimlane sources crowdstrike logscale authentication documentation https //library humio com/falcon logscale/api authentication html https //library humio com/falcon logscale/api authentication html crowdstrike logscale rest api documentation https //library humio com/falcon logscale/api html https //library humio com/falcon logscale/api html crowdstrike logscale search api documentation https //library humio com/falcon logscale/api search html https //library humio com/falcon logscale/api search html crowdstrike logscale graphql api documentation https //library humio com/falcon logscale/api graphql html https //library humio com/falcon logscale/api graphql html crowdstrike logscale alert api documentation https //library humio com/falcon logscale/api alerts html https //library humio com/falcon logscale/api alerts html crowdstrike logscale ingest api documentation https //library humio com/falcon logscale/api ingest html https //library humio com/falcon logscale/api ingest html crowdstrike logscale lookup api documentation https //library humio com/falcon logscale/api lookups html https //library humio com/falcon logscale/api lookups html