Everything ships as a self-contained artifact with published SHA-256 checksums — no account,
no telemetry, no call-home. The platform to deploy, and LUnA,
the universal agent, to feed it.
The platform
Free trial — Docker Compose kit
The full product, free
Ingest, search, alerting, dashboards, and the topology editor on the free Community
tier. No license file, nothing to activate — a starter pipeline is deployed for you, so
your first log line is searchable minutes after docker compose up.
What you need
A Docker host with Compose v2, 4 CPU cores and 24 GB of RAM free, and outbound
access to registry.logrok.com. Evaluating fully air-gapped?
Talk to us for a pre-loaded image bundle.
The hardened production form: AlmaLinux with FIPS 140-3 validated crypto and DISA STIG
hardening, TLS out of the box, one-click in-product upgrades — current release 1.1.1.
VMware OVA
ESXi, vSphere, and Workstation. Import via the vSphere Client or File → Open. Download (5.3 GB) SHA-256 0726ebf7593ecee5…
QCOW2
KVM, Proxmox, and OpenStack. Import with virt-install or the Proxmox UI. Download (10.2 GB) SHA-256 0ef60954d81c8e90…
The collection front door: forwards standard syslog into logrok or any aggregator, with
OTLP, Splunk HEC and the other native destinations available on Apex. The free
Core tier runs unmanaged out of the box; Apex features unlock with a
license. Always the latest stable release.
Windows
Windows 10 / 11 · Server 2016+ · Authenticode-signed installer
Every artifact publishes a SHA-256 checksum, and the agent's container image is cosign-signed. On a security product, don't skip this.
Platform artifacts (trial & appliances)
# each artifact's SHA-256 is published in the release manifest
curl -s https://updates.logrok.com/manifest.json | grep -A3 '"version": "1.1.1"'
sha256sum logrok-*.tar logrok-*.{ova,qcow2,vhdx}
Appliances upgrade from the in-product Upgrade page — it finds new
releases in the manifest and applies the signed bundle for you (current: 1.1.1). Air-gapped appliances side-load the same bundle.
Compose & Kubernetes
Compose deployments upgrade by bumping one version variable — the kit's bundled helper
script does it with a rollback safety net. Images are pulled from
registry.logrok.com.
Verify what you run
Every artifact's SHA-256 is published in the
release manifest; upgrade
bundles are additionally signed and verified by the appliance before applying.
Licensing
The platform's Community trial is free to evaluate. For the agent,
Luna Core is free — for non-commercial use, alongside a licensed logrok
deployment, and for commercial fleets up to 10 agents. Core collects from the host and
forwards one open standard: RFC 5424 syslog over TCP/TLS, to one destination. Encryption is
never a paid feature. Apex covers everything else — Windows Event Log, ETW,
WMI and Linux audit collection, fleet management, per-agent mTLS, macOS, Kubernetes, the
air-gap diode, edge reduction, and every destination other than standard
syslog (Splunk HEC, Microsoft Sentinel, Cortex XSIAM, Kafka, S3, Grafana Loki,
OTLP) — issued free with logrok, or purchased standalone. By downloading and running the
agent you accept the
LUnA End-User License Agreement.