All Collections
Sensors & Outputs



How to collect PCAPs from Linux using the LC sensor?
How do I install the EDR sensor on Linux?
How do I install sensors in VMs and containers?
How can I manually uninstall the LimaCharlie sensor from a Windows endpoint?
Why do I see Error 223 on some Code Identity events?
How can I tell which installation key was used to enrol a sensor?
How much data does the LimaCharlie sensor produce per day?
How do I configure sensors in my tenant to auto-update to the new version?
How do I test a new sensor version before updating all sensors in my tenant?
How can I delete a sensor installation key?
Will LimaCharlie sensor get picked up by anti-virus software?
How much resources does the LimaCharlie sensor consume?
How can I restore a sensor that have been deleted?
What happens when the host is offline?
Why does my sensor initially connect successfully but then disappears?
How can I see the activity that occurred before LimaCharlie sensor was installed?
How do I troubleshoot the sensor issue?
How can I remove LimaCharlie sensor from all the endpoints in my network?
How can I use tags?
How do I know if an EDR sensor was removed, but still has the service running and reaching out?
How do I remove tags from a sensor?
How can I use lc:sleep tag when deploying LC in a sleeper mode?
How do I ingest logs or telemetry from cloud-based external sources?
1Password Business
How to bring Microsoft Office 365 logs into LimaCharlie?
How to bring Microsoft Defender logs into LimaCharlie?
How to get realtime Syslog ingestion with LimaCharlie
How to connect Google Cloud logs to LimaCharlie
How can I collect Duo logs?
How can I collect Windows Event Logs through LimaCharlie Adapter, without installing the LC agent on the endpoint?
How can I push telemetry to Chronicle?
How to send data from LimaCharlie to Splunk?
How to send data from LimaCharlie to Google Cloud BigQuery?
How do I send detections from LimaCharlie to an email?
Can I rely on specific IP addresses to add to my allow list (whitelist) for Outputs?
How can I test if my outputs are configured correctly?
Where can I find the output configuration error details?