Docs

connector.conf

CoreSync connector.conf stanza used for ingesting LogConnector logs into Falcon LogScale.

CONNECTOR.CONF

Specifications

[ingestlogs://logconnector]
repo = <repository-name>    By default, value from defaultrepo parameter of server.conf is used if this parameter is not provided.
sourcetype = dataelicit/coresync:coresync
frequency = <seconds>       Interval to run the input
cron = <cron-expression>
        Note: Cron has higher priority and will be considered for scheduling instead of frequency, if both are defined.
              It is preferable to define only one, either cron or frequency.

loglevel = Comma seprated values. Possible values: info,warn,error,fatal,debug,trace
           By default info,warn,error,fatal will be taken if this parameter is not provided.

component = Comma seprated values. Possible values:
            api,client,config,cli,daemon,ingester,license,queue,scheduler,users
            By default all values will be taken if this parameter is not provided.

Example

[ingestlogs://logconnector]
repo = test
sourcetype = dataelicit/coresync:coresync
frequency = 60
loglevel = warn,error,fatal
component = config,cli,daemon,ingester

Note

Make sure that the stanza name you define in local/connector.conf is not disabled in default/connector.conf, else it will be skipped.

✉️Still stuck? How can we help?

Updated on July 6, 2025

← Manual