Sign in to Logs

Sign in and authentication

To authenticate users so they can use Logs, powered by CrowdStrike, an administrator in your organization must configure an OpenID Connect (OIDC) or Security Assertion Markup Language (SAML) app in your identity provider (IdP). Chronosphere Support uses the details from that app to configure an IdP in CrowdStrike® Falcon LogScale™ to authenticate your users in Chronosphere. See Authentication and identity providers (opens in a new tab) in the LogScale documentation for more information.

Chronosphere is working on an integrated authentication experience that doesn’t require an OIDC or SAML app. When that experience is available you can remove your authentication app, since signing in to Chronosphere will provide access to LogScale.

Users can then sign in to Chronosphere, and in the navigation menu select Exploring > Logs Explorer to start querying log data.