Register FalconEventCollector
Define Falcon LogScale ingestion endpoint and token for logging
Once configured, the Falcon LogScale destination can be used by PSFalcon but the module will not send events to Falcon LogScale until 'Enable' options are chosen. 'Remove-FalconEventCollector' can be used to remove a configured destination and stop the transmission of events.
| Name | Type | Min | Max | Allowed | Pipeline | PipelineByName | Description |
|---|---|---|---|---|---|---|---|
| Uri | Uri | X | Falcon LogScale cloud | ||||
| Token | String | X | Falcon LogScale ingestion token | ||||
| Enable | String[] |
responsesrequests
|
X | Define events to send to the collector |
Register-FalconEventCollector [-Uri] <Uri> [-Token] <String> [[-Enable] <String[]>] [<CommonParameters>]2023-01-17: PSFalcon v2.2.4
