---
title:  CrowdStrike LogScale
slug: authentication-guides/crowdstrike-logscale
docTags: 
createdAt: 2026-07-27T12:00:12.776Z
---

# Introduction

This guide tells you how to authenticate the **CrowdStrike LogScale** connector in Swimlane using **HTTP Bearer Authentication**.

You will generate an API token in CrowdStrike LogScale, collect the required connection details, and configure the connector in Swimlane.

# Prerequisites

CrowdStrike LogScale Access Requirements

You must have permissions to:

- Access the **CrowdStrike LogScale** portal.
- Create and manage API tokens.
- Access the LogScale REST APIs.
- Read or manage repositories based on your intended use.

## Required Credentials

During setup, you will collect:

| **Credential** | **Description**                                |
| -------------- | ---------------------------------------------- |
| URL            | Base URL of your CrowdStrike LogScale instance |
| Token          | API Bearer Token used for authentication       |

# CrowdStrike LogScale Setup

Take the following steps to generate an API Token:

1. Log in to your **CrowdStrike LogScale** instance.
2. Click your **User Profile**.
3. Navigate to **API Tokens** or **Personal Access Tokens**.
4. Click **Create Token**.
5. Enter a descriptive name for the token.
6. Assign the appropriate permissions required for your workflows.
7. Click **Create**.
8. Copy and securely save the generated token.

This saved value is your **Bearer Token**.

Take the following steps to collect the LogScale URL:

1. Log in to your **CrowdStrike LogScale** instance.
2. Copy the URL displayed in your browser.

Example:

- Cloud: https\://cloud.us.humio.com
- Self-hosted: https\://logscale.company.com

Use this value as the **url** during connector configuration.

# Connector Configuration in Swimlane

1. Log in to Turbine.
2. From the left-hand navigation pane, click **ORCHESTRATION** and click **Assets**.
3. Asset homepage opens.
4. Click the plus icon to open the **Configure your Connector Asset** window.
5. Select **CrowdStrike LogScale** from the Asset type list.
6. Fill in the Asset Settings and Asset Input as shown:

| **Field**       | **Description**                   | **Required/Optional** |
| --------------- | --------------------------------- | --------------------- |
| **url**         | CrowdStrike LogScale instance URL | Required              |
| **token**       | Bearer API Token                  | Required              |
| **verify\_ssl** | Enable/Disable SSL Verification   | Optional              |
| **http\_proxy** | Optional proxy configuration      | Optional              |

Fields with \* marks are required.

7. Click **Create**.

::Image[]{src="https://api.archbee.com/api/optimize/n8uUzk0MM4uC57-zlHNtY/SWo5CPfOiesgcgrwIrH-V_image.png" size="200" isUploading="false" width="800" height="404" darkWidth="800" darkHeight="404" showCaption="false"}

:::hint{type="info"}
- The connector authenticates using an **HTTP Bearer Token**.
- The token is sent in the Authorization header as a Bearer token.
- Ensure the token has permissions appropriate for the actions you intend to perform.
- Repository-level permissions determine which repositories and APIs the connector can access.
:::

# Troubleshooting

## Authentication Failed (401 Unauthorised)

Verify that:

- The Bearer Token is valid.
- The token has not expired or been revoked.
- The URL points to the correct CrowdStrike LogScale instance.
- There are no extra spaces when copying the token.

## Permission Denied (403 Forbidden)

Verify that:

- The API token has sufficient permissions.
- Your account has access to the required repositories.
- Your organisation allows API access for your user account.

## SSL Errors

If SSL verification fails:

- Verify that the LogScale SSL certificate is trusted.
- Confirm that any corporate proxy or firewall is not intercepting SSL traffic.
- Temporarily disable **verify\_ssl** only for testing if permitted by your organisation's security policy.

### Result

You have successfully authenticated the **CrowdStrike LogScale** connector in Swimlane.

### Sources

- CrowdStrike LogScale Authentication Documentation
  [https://library.humio.com/falcon-logscale/api-authentication.html](https://library.humio.com/falcon-logscale/api-authentication.html)
- CrowdStrike LogScale REST API Documentation
  [https://library.humio.com/falcon-logscale/api.html](https://library.humio.com/falcon-logscale/api.html)
- CrowdStrike LogScale Search API Documentation
  [https://library.humio.com/falcon-logscale/api-search.html](https://library.humio.com/falcon-logscale/api-search.html)
- CrowdStrike LogScale GraphQL API Documentation
  [https://library.humio.com/falcon-logscale/api-graphql.html](https://library.humio.com/falcon-logscale/api-graphql.html)
- CrowdStrike LogScale Alert API Documentation
  [https://library.humio.com/falcon-logscale/api-alerts.html](https://library.humio.com/falcon-logscale/api-alerts.html)
- CrowdStrike LogScale Ingest API Documentation
  [https://library.humio.com/falcon-logscale/api-ingest.html](https://library.humio.com/falcon-logscale/api-ingest.html)
- CrowdStrike LogScale Lookup API Documentation
  [https://library.humio.com/falcon-logscale/api-lookups.html](https://library.humio.com/falcon-logscale/api-lookups.html)