Hardened OpenSearch, Grafana Loki & Log Management

AWS Developer Tools
Base
Hardened build
minimal ports, security patches applied at build time
Access
Unique credentials
generated on first boot, readable only by root
Verified
Boots working
services pass a health gate before release
Support
24/7, 365 days
by email and live chat, 24 hour response SLA

Overview

This listing is a collection of separate, one per product and version, chosen from the Software version dropdown at launch.

Why the cloudimg image

This image arrives installed, configured and hardened, so there is no manual setup before you can use it. It is built on a patched base, runs with credentials generated uniquely for your instance on first boot, and passes an automated health check before every release. Every deployment is backed by 24/7 support from cloudimg engineers.

Key features

  • No default login: administrator, ingest and shared-key credentials are generated uniquely on each instance's first boot and stored root-only
  • Web consoles and HTTP ingest APIs use HTTPS with a per-instance certificate; syslog and forward ports stay closed in the security group until you open them
  • OpenSearch with Fluent Bit, Grafana Loki, OpenObserve, VictoriaLogs, Parseable, Fluentd, Vector, rsyslog and more: pick one as the software version at launch

Description

This is a repackaged open source software product wherein additional charges apply for security hardening, secure-by-default configuration and per-instance setup.

What cloudimg adds to every version

  • Every image is built by cloudimg on a fully patched base with the latest security updates applied at build time.
  • Administrator, ingest and shared-key credentials are generated uniquely on the first boot of each instance, so no default login exists and no two instances share a secret.

Included products

  • AWStats 8.0: reports from web, mail and FTP server logs
  • Fluent Bit 5.1.4: a lightweight log shipper
  • Fluentd 1.19.4: a log collector and router
  • Gigapipe 5.4.4: logs, metrics and traces with Loki- and Prometheus-compatible APIs
  • Grafana Loki 3.7.1: the open source log aggregation system from Grafana Labs
  • Logdy 0.17.1: a web-based live log viewer
  • OpenObserve 0.91.1: logs, metrics and traces in one engine
  • OpenObserve 0.92.2 + Vector 0.58.0: logs, metrics and traces in one engine
  • OpenSearch 3.8.0 + Fluent Bit 5.1.0: search and dashboards over your logs
  • Parseable 3.0.0: log storage and search on object storage
  • rsyslog 8.2312.0: a central syslog server
  • Vector 0.57.0: a log and metrics pipeline
  • VictoriaLogs 1.52.0: fast, low-resource log storage

How to choose a version

  • Full-text search and dashboards over your logs: OpenSearch with Fluent Bit
  • Label-indexed log storage queried with LogQL: Grafana Loki
  • Logs, metrics and traces in one place: OpenObserve, with or without Vector
  • High-volume log storage on little hardware: VictoriaLogs or Parseable
  • Ship and route logs: Fluent Bit, Fluentd or Vector; a central syslog server: rsyslog
  • Web server log reports: AWStats; a live log viewer: Logdy

Network and access defaults

  • Web consoles and HTTP ingest APIs are served over HTTPS with a per-instance certificate; log ingest ports such as syslog and Fluent forward stay closed in the security group until you open them to your own networks, and internal services are bound to localhost.

This listing is a collection of separate AMIs, one per product and version, chosen from the Software version dropdown at launch.

Support

cloudimg provides 24/7 technical support for every version in this listing by email and live chat, 365 days a year, with a 24-hour response SLA: support@cloudimg.co.uk.

Trademarks

OpenSearch is a trademark of LF Projects, LLC. Grafana and Loki are trademarks of Grafana Labs. Other product names are trademarks of their respective owners. cloudimg is not affiliated with or endorsed by any of them.

Related technologies

centralized loggingsyslog serverfluent bitfluentdvectorrsyslogopenobservevictorialogsparseablegigapipelogdyawstatssiem pipelineobservabilityevent data