Skip to content

Download

Run logrok on your own infrastructure

Everything ships as a self-contained artifact with published SHA-256 checksums — no account, no telemetry. The platform to deploy, and LUnA, the universal agent, to feed it.

The platform

Free trial — Docker Compose kit

The core platform, free

Ingest, search, alerting, dashboards, and the topology editor on the free Community tier. No license file, nothing to activate — a starter pipeline is deployed for you, so your first log line is searchable minutes after docker compose up. The detection engine, MCP server, object-storage archival and monitoring stack come with licensed deployments.

What you need

A Docker host with Compose v2, 4 CPU cores and 24 GB of RAM free, and outbound access to registry.logrok.com. Evaluating fully air-gapped? Talk to us for a pre-loaded image bundle.

Virtual appliance

The hardened production form: AlmaLinux with FIPS 140-3 validated crypto and DISA STIG hardening, TLS out of the box, one-click in-product upgrades — current release 1.4.2.

VMware OVA

ESXi, vSphere, and Workstation. Import via the vSphere Client or File → Open.
Download (5.2 GB)
SHA-256 f5e1307adf3704eb…

QCOW2

KVM and Proxmox. Import with virt-install or the Proxmox UI.
Download (9.8 GB)
SHA-256 2f76ea349de1164d…

Hyper-V VHDX

Generation 2 VM, UEFI boot, Secure Boot off.
Download (10.8 GB)
SHA-256 1543a5ab25321a0a…

Latest release: logrok 1.4.2 (7 October 2026). Ships with syslog-ng 4.12.0, Apache Doris 4.1.1, Keycloak 26.6.2, PostgreSQL 16 and AlmaLinux 9.2. Licensed compliance packs: DORA, NIS2 and PCI DSS. Helps meet HIPAA and GDPR audit-logging requirements.

Kubernetes — Helm chart

The chart is published with every release in the same registry as the images (chart version = release version, currently 1.4.2). It deploys the platform against your own PostgreSQL 16+, Keycloak 26+ and Apache Doris 4+ and defaults to the FIPS images. Air-gapped? Pull the chart and mirror the images first. 

helm install logrok oci://registry.logrok.com/logrok/charts/logrok \
  --version <X.Y.Z> --namespace logrok --values my-values.yaml

The universal agent

LUnA — one static binary, every endpoint

The collection front door: forwards standard syslog into logrok or any aggregator, with OTLP, Splunk HEC and the other native destinations available on Apex. The free Core tier runs unmanaged out of the box; Apex features unlock with a license. Always the latest stable release.

Container

multi-arch (amd64 · arm64) · cosign-signed

docker pull ghcr.io/logiqum/luna:latest
More platforms — experimental architectures

Cross-compiled static binaries, runtime-unverified. Provided for evaluation on the listed platforms.

FreeBSD · amd64 FreeBSD · arm64 OpenBSD · amd64 NetBSD · amd64 Solaris · amd64 AIX · ppc64

Every agent release, checksum & signature on GitHub — github.com/logiqum/luna

Verify what you downloaded

Every artifact publishes a SHA-256 checksum, and the agent's container image is cosign-signed. On a security product, don't skip this.

Platform artifacts (trial & appliances)

# each artifact's SHA-256 is published in the release manifest
curl -s https://updates.logrok.com/manifest.json | grep -A3 '"version": "1.4.2"'
sha256sum logrok-*.tar logrok-*.{ova,qcow2,vhdx}

Agent checksums (LUnA)

curl -LO https://github.com/logiqum/luna/releases/latest/download/SHA256SUMS
sha256sum -c SHA256SUMS --ignore-missing

Agent container signature (cosign)

cosign verify --key https://raw.githubusercontent.com/logiqum/luna/main/cosign.pub \
  ghcr.io/logiqum/luna:latest

Already running logrok?

Appliance upgrades

Appliances upgrade from the in-product Upgrade page — it finds new releases in the manifest and applies the signed bundle for you (current: 1.4.2). Air-gapped appliances side-load the same bundle.

Upgrade bundle 1.4.2 SHA-256: 4a8ae79c82cd3a31c8b731f33d037bca926dd877ff91e29d2322011c7a19cad3

Compose & Kubernetes

Compose deployments upgrade by bumping one version variable — the kit's bundled helper script does it with a rollback safety net. Kubernetes deployments use helm upgrade (and helm rollback). Images are pulled from registry.logrok.com.

Verify what you run

Every artifact's SHA-256 is published in the release manifest; upgrade bundles are additionally signed and verified by the appliance before applying.

Licensing

The platform's Community trial is free to evaluate. For the agent, Luna Core is free — for non-commercial use, alongside a licensed logrok deployment, and for commercial fleets up to 10 agents. Core collects from the host and forwards one open standard: RFC 5424 syslog over TCP/TLS, to one destination. Encryption is never a paid feature. Apex covers everything else — Windows Event Log, ETW, WMI and Linux audit collection, fleet management, per-agent mTLS, macOS, Kubernetes, the air-gap diode, edge reduction, and every destination other than standard syslog (Splunk HEC, Microsoft Sentinel, Cortex XSIAM, Kafka, S3, Grafana Loki, OTLP) — issued free with logrok, or purchased standalone. By downloading and running the agent you accept the LUnA End-User License Agreement.

Rolling logrok out across a fleet?

Book a demo About the LUnA agent