Falcon LogScale Reviews

Name: Falcon LogScale
Brand: CrowdStrike
Rating: 4.3 (7 reviews)

Vendor: CrowdStrike

4.3 out of 5

7 reviews
100% willing to recommend

Leave a review

What is Falcon LogScale?

Falcon LogScale is a modern log management tool that offers robust features for organizations seeking efficient log analysis. It provides high-speed log ingestion and query capabilities, enabling detailed insights into system performance and security events.

Get the Log Management Buyer's Guide and find out what your peers are saying about Falcon LogScale, Datadog, Splunk Enterprise Security and more!

Falcon LogScale is the #33 ranked solution in Log Management Software. PeerSpot users give Falcon LogScale an average rating of 8.6 out of 10. Falcon LogScale is most commonly compared to Datadog: Falcon LogScale vs Datadog. Falcon LogScale is popular among the large enterprise segment, accounting for 55% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 15% of all views.

Buyer's Guide

Log Management

February 2026

Get the category report

Helped 884,706 peers since 2012

Featured Falcon LogScale reviews

Sydney D'Souza

Security Consultant at a tech vendor with 5,001-10,000 employees

I have not worked on that particular part, but regarding improvement, KQL seems to be quite complicated and we have to brush up on that if we want to become an expert on it. KQL is a bit challenging for us. When we talk about Microsoft, KQL is simpler when compared to SQL. However, SQL is faster and quite efficient, but the language is a bit tough, maybe because it is new. I have just been working with it for the past two years. If I have more exposure in the coming years, it will become an easier option for me. KQL should be simplified, which would be a better thing. The documentation should not only be private but should be made public. Though we are partners and have access to those documents, sometimes I conduct testing on my own and have to log into a partner account or customer account to access those documents. That has to be improved. SQL has to be improved as well. When it comes to the overall Falcon LogScale console, it could be easier if it were made more attractive. For example, if something is shown on the dashboard with simplified icons and text, it would be a great option if there were some colors or larger icons. One drawback I have seen with Falcon LogScale is that there is something that cannot be customized. There is an account detection that seems to be a systematic account, and if we want to change it from a systematic account to a user account when it is detecting a system account, that seems to be a problem for us.

Read full review

David Fartouk

CTO at Trust-IT Solutions

One area of Falcon LogScale that I think could be improved is that it is a bit complex. Whatever is easy to use and has a lot of automation and ability to query the product is very easy, but if you want to do something that is not built into the product, if you want to query something special, it becomes a regular SIEM, which is not so easy to query. What they have done now is added what is called Charlotte AI, which is their new AI capabilities that can help with this. If you had asked me a few weeks ago, I would have said that the AI integration was not easy, but now it is built-in, so it has become easy. They solved this problem. Falcon LogScale's data retention capabilities are one of the things that we are currently not covering completely. We do have the ability to retain the data with Falcon LogScale. We do have the requirements for that. However, we are not one hundred percent there yet. For us, it is a good solution, but we are not sure in terms of the cost. We do have the requirements to retain the data for two years, and we are not retaining the data for two years in Falcon LogScale. We have not decided yet to do that. Currently, we are using other types of backups like traditional backup to keep the data outside and then to store it in very cheap locations. We are thinking about it.

Read full review

reviewer2783883

Developer at a manufacturing company with 201-500 employees

Falcon LogScale offers excellent features, with scalability being the most notable. The search speed stands out to me as particularly good. Falcon LogScale has positively impacted my organization by providing visibility of the logs, making it easier for us to troubleshoot any issues. The visibility makes troubleshooting easier overall because you can see the logs.

Read full review

Falcon LogScale mindshare

As of March 2026, the mindshare of Falcon LogScale in the Log Management category stands at 0.9%, up from 0.7% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Log Management Mindshare Distribution
Product	Mindshare (%)
Falcon LogScale	0.9%
Wazuh	7.5%
Splunk Enterprise Security	6.8%
Other	84.8%

Log Management

Key learnings from peers

Last updated Mar 22, 2026

Valuable Features

Falcon LogScale offers seamless integration and flexibility, enhancing data management with fast search capabilities and impressive data retention for up to a year. Users appreciate customizable dashboards, quick log data retrieval, and live log ingestion. Its AI and ML-based engine improves analysis and visibility, facilitating easier troubleshooting. SQL efficiency, identity protection, and exposure management are valuable features, with scalability and visualization standing out.

"Falcon LogScale's insights give you a lot of information that an expert already thought would be valuable for you."
"I have only heard the best about CrowdStrike's support."
"Falcon LogScale seems to be a better option with better visibility when it comes to the dashboard and the kill chain process, including the attack surface."

Room for Improvement

Falcon LogScale users note complexity in querying outside of built-in features. Data retention is not fully supported for long-term requirements. KQL and SQL present challenges due to complexity, and documentation access needs improvement. The interface could be more user-friendly with visual enhancements. Integration capabilities, parser options, and differentiation of features require better functionality. Users seek more attractive pricing and desire options for better customization in account detection settings.

"One area of Falcon LogScale that I think could be improved is that it is a bit complex."
"That is a difficult question regarding Falcon LogScale. That is really a question for the professionals, and I am not a professional, so I do not know."
"KQL is a bit challenging for us."

Pricing

Falcon LogScale users indicate pricing may vary due to specific agreements such as national tenders. Many find it cost-effective and appreciate its efficient log ingestion, thanks to features like inbuilt indexing and parsing. While some perceive the pricing as average or suggest potential for reduction, others praise its straightforward setup and low costs compared to competitors like Microsoft, Trend Micro, or Splunk.

Popular Use Cases

Organizations primarily use Falcon LogScale for log management and analysis as a next-generation SIEM. They configure integrations, create dashboards, and perform anomaly detection by analyzing collected logs from sources like firewalls and Active Directory. Some use it for compliance and log retention. They appreciate its fast search capabilities, ease of use for creating queries, and ability to customize solutions for specific needs, often in collaboration with CrowdStrike. They handle tasks like quarantine and access logs quickly.

Service and Support

Falcon LogScale offers highly satisfactory customer service and support. Users report receiving timely assistance without complaints. Documentation is clear, facilitating easy deployment. Communication channels via email and the console are effective. Regular updates and successful problem resolution are common, evidenced by fast responses to queries. Workshops and detailed explanations by Subject Matter Experts enhance understanding. Service is rated between seven to ten out of ten, with many highlighting responsiveness and helpfulness.

Deployment

Users found Falcon LogScale's initial setup straightforward. Many managed deployment quickly, especially those already using CrowdStrike. Documentation is comprehensive, making deployment intuitive if followed closely. Some noted complexity with on-premises installs, while SaaS cloud setups were easier. Compared to Microsoft and Trend Micro, Falcon LogScale offers better dashboard visibility and the kill chain process.

Scalability

Falcon LogScale is cloud-based, allowing for seamless scalability without limits. Users appreciate its ability to integrate and aggregate data from diverse sources, simplifying operations. Some note that scalability is easy through connecting to various log resources, while others suggest improvements in visualization and integration. Smaller organizations haven't yet scaled due to moderate data usage but are considering future expansion. Users rate its scalability highly, recognizing room for enhancement in certain areas.

Stability

Users report that Falcon LogScale is stable and reliable, demonstrating excellent performance, particularly with large data ingestion. Data retrieval from past months is nearly instantaneous. There is a consensus that no complexities with stability are present, consistently rating it nine out of ten. Stability is positively highlighted.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Log Management Buyer's Guide for additional reliable information.

Review data by company size

By reviewers
Company Size	Count
Small Business	3
Midsize Enterprise	2
Large Enterprise	2

By reviewers

By visitors reading reviews
Company Size	Count
Small Business	47
Midsize Enterprise	34
Large Enterprise	101

By visitors reading reviews

Top industries

By visitors reading reviews

Computer Software Company

15%

Manufacturing Company

12%

Government

10%

Media Company

Comms Service Provider

Financial Services Firm

Healthcare Company

Energy/Utilities Company

Educational Organization

Retailer

Insurance Company

University

Outsourcing Company

Non Profit

Transportation Company

Logistics Company

Construction Company

Hospitality Company

Marketing Services Firm

Consumer Goods Company

Real Estate/Law Firm

Wholesaler/Distributor

Pharma/Biotech Company

Leisure / Travel Company

Performing Arts

Sports Company

Compare Falcon LogScale with alternative products

Learn more about Falcon LogScale

Falcon LogScale provides an efficient way for IT teams to handle massive volumes of log data. Its architecture supports rapid ingestion and real-time querying, making it ideal for security and operational analytics. With customizable search capabilities, it allows deep analysis to detect anomalies and troubleshoot issues effectively. Users appreciate its scalability and performance-driven approach, making it suitable for large infrastructures.

What are the most important features of Falcon LogScale?

High-Speed Log Ingestion: Manages vast amounts of log data swiftly and efficiently.
Real-Time Querying: Enables quick analysis and insights into current data.
Scalability: Designed to grow with the expanding needs of large organizations.
Customizable Searching: Offers granular search options for precise data examination.

What benefits or ROI should be anticipated?

Enhanced Operational Efficiency: Streamlines log analysis processes.
Improved Security Posture: Identifies security threats quickly through powerful search and alert capabilities.
Cost-Effective Scaling: Offers scalable solutions that grow with business needs.
Time Savings: Reduces time spent on log data management and analysis.

Falcon LogScale is particularly beneficial in industries requiring detailed compliance reporting and real-time threat detection, such as finance and healthcare. It's implemented to support security operations and incident response teams by providing timely insights and operational efficiencies.

Product Categories

Log Management

Popular Comparisons

Datadog vs Falcon LogScale

Splunk Enterprise Security vs Falcon LogScale

Dynatrace vs Falcon LogScale

IBM Security QRadar vs Falcon LogScale

Cribl vs Falcon LogScale

Grafana Loki vs Falcon LogScale

Graylog Enterprise vs Falcon LogScale

Security Onion vs Falcon LogScale

LogRhythm SIEM vs Falcon LogScale

Elastic Stack vs Falcon LogScale

Amazon OpenSearch Service vs Falcon LogScale

Amazon CloudWatch vs Falcon LogScale

Fortinet FortiAnalyzer vs Falcon LogScale

syslog-ng vs Falcon LogScale

ManageEngine Log360 vs Falcon LogScale

See all alternatives

Falcon LogScale Reviews Summary
Author info	Rating	Review Summary
Security Consultant at a tech vendor with 5,001-10,000 employees	4.0	I’ve used Falcon LogScale for two years and value its NG SIEM, exposure/identity features, fast SQL, and customizable portal that correlates incidents across sources. Setup and support are solid and pricing efficient, but KQL is hard, docs are restricted, UI needs improvement, and some detections aren’t customizable.
CTO at Trust-IT Solutions	5.0	We leverage Falcon LogScale as our SIEM for log analysis and anomaly detection, valuing its seamless CrowdStrike integration and insights. Charlotte AI has improved query complexity, though data retention costs are a concern. It's a stable, scalable solution.
Developer at a manufacturing company with 201-500 employees	4.5	I've used Falcon LogScale for a year as a SIEM to collect logs, appreciating its scalability, fast search, and visibility for troubleshooting. It's stable, cost-effective, easy to use, and supported by responsive customer service.
Sales Representative at a tech vendor with 5,001-10,000 employees	4.0	I’ve worked around Falcon LogScale for five years as an account manager; my customers mainly use its search and visualization. We implement with CrowdStrike’s help, and support seems strong. In regulated Germany, DORA and paperwork make implementation a long process on hybrid Azure.
Lead Engg. Information Assurance at ACPL Systems Pvt Ltd	4.0	I primarily use Falcon LogScale for log management, compliance, and retention, appreciating its fast search and index-free retention. Improvements are needed in integration and dashboard usability, with OpenText and IBM QRadar as notable competitors in this space.
Security \| SIEM Engineer at a tech services company with 51-200 employees	4.5	I find Falcon LogScale by CrowdStrike outstanding for our MSSP work with extensive data retention and rapid retrieval, surpassing tools like Global Chronicle, Sumo Logic, and Splunk. However, some redundant features exist across different tools.
Technical Manager at a tech vendor with 11-50 employees	4.0	I find Falcon LogScale to be a next-generation SIEM solution offering fast search results. Its key feature is rapid data retrieval, outperforming traditional alternatives like Splunk. While the price could be better, no other improvements are necessary.

Falcon LogScale Reviews

What is Falcon LogScale?

Featured Falcon LogScale reviews

Falcon LogScale mindshare

Valuable Features

Room for Improvement

Pricing

Popular Use Cases

Service and Support

Deployment

Scalability

Stability

Review data by company size

Top industries

Compare Falcon LogScale with alternative products

Learn more about Falcon LogScale

Related questions

Product Categories

Popular Comparisons