Skip to content

Download

Run logrok on your own infrastructure

Everything ships as a self-contained artifact with published SHA-256 checksums — no account, no telemetry, no call-home. The platform to deploy, and LUnA, the universal agent, to feed it.

The platform

Free trial — Docker Compose kit

The full product, free

Ingest, search, alerting, dashboards, and the topology editor on the free Community tier. No license file, nothing to activate — a starter pipeline is deployed for you, so your first log line is searchable minutes after docker compose up.

What you need

A Docker host with Compose v2, 4 CPU cores and 24 GB of RAM free, and outbound access to registry.logrok.com. Evaluating fully air-gapped? Talk to us for a pre-loaded image bundle.

Virtual appliance

The hardened production form: AlmaLinux with FIPS 140-3 validated crypto and DISA STIG hardening, TLS out of the box, one-click in-product upgrades — current release 1.1.1.

VMware OVA

ESXi, vSphere, and Workstation. Import via the vSphere Client or File → Open.
Download (5.3 GB)
SHA-256 0726ebf7593ecee5…

QCOW2

KVM, Proxmox, and OpenStack. Import with virt-install or the Proxmox UI.
Download (10.2 GB)
SHA-256 0ef60954d81c8e90…

Hyper-V VHDX

Generation 2 VM, UEFI boot, Secure Boot off.
Download (11.3 GB)
SHA-256 44df3e91a6c08906…

The universal agent

LUnA — one static binary, every endpoint

The collection front door: forwards standard syslog into logrok or any aggregator, with OTLP, Splunk HEC and the other native destinations available on Apex. The free Core tier runs unmanaged out of the box; Apex features unlock with a license. Always the latest stable release.

Container

multi-arch (amd64 · arm64) · cosign-signed

docker pull ghcr.io/logiqum/luna:latest
More platforms — experimental architectures

Cross-compiled static binaries, runtime-unverified. Provided for evaluation on the listed platforms.

Verify what you downloaded

Every artifact publishes a SHA-256 checksum, and the agent's container image is cosign-signed. On a security product, don't skip this.

Platform artifacts (trial & appliances)

# each artifact's SHA-256 is published in the release manifest
curl -s https://updates.logrok.com/manifest.json | grep -A3 '"version": "1.1.1"'
sha256sum logrok-*.tar logrok-*.{ova,qcow2,vhdx}

Agent checksums (LUnA)

curl -LO https://github.com/logiqum/luna/releases/latest/download/SHA256SUMS
sha256sum -c SHA256SUMS --ignore-missing

Agent container signature (cosign)

cosign verify --key https://raw.githubusercontent.com/logiqum/luna/main/cosign.pub \
  ghcr.io/logiqum/luna:latest

Already running logrok?

Appliance upgrades

Appliances upgrade from the in-product Upgrade page — it finds new releases in the manifest and applies the signed bundle for you (current: 1.1.1). Air-gapped appliances side-load the same bundle.

Compose & Kubernetes

Compose deployments upgrade by bumping one version variable — the kit's bundled helper script does it with a rollback safety net. Images are pulled from registry.logrok.com.

Verify what you run

Every artifact's SHA-256 is published in the release manifest; upgrade bundles are additionally signed and verified by the appliance before applying.

Licensing

The platform's Community trial is free to evaluate. For the agent, Luna Core is free — for non-commercial use, alongside a licensed logrok deployment, and for commercial fleets up to 10 agents. Core collects from the host and forwards one open standard: RFC 5424 syslog over TCP/TLS, to one destination. Encryption is never a paid feature. Apex covers everything else — Windows Event Log, ETW, WMI and Linux audit collection, fleet management, per-agent mTLS, macOS, Kubernetes, the air-gap diode, edge reduction, and every destination other than standard syslog (Splunk HEC, Microsoft Sentinel, Cortex XSIAM, Kafka, S3, Grafana Loki, OTLP) — issued free with logrok, or purchased standalone. By downloading and running the agent you accept the LUnA End-User License Agreement.

Rolling logrok out across a fleet?