SecureAnyCloud
Deployment guide

log management

Overview

This page is the entry point for the SecureAnyCloud Hardened OpenSearch, Grafana Loki & Log Management AMIs listing on AWS Marketplace. The listing is a single product that offers several open-source log management and observability tools as separate software versions. Subscribe once, choose the version you want from the Software version list at launch, then open its guide below for the full setup and connection walk-through.

Each tool is packaged as a standalone AMI with security hardening, secure-by-default configuration and unique per-instance credentials generated on first boot, with HTTPS for each web console.

What SecureAnyCloud adds to every version:

  • Fully patched base. Every image is built on a base with the latest security updates applied at build time, so you start from a known-good foundation.
  • Unique credentials on first boot. Administrator, ingest and shared-key credentials are generated when each instance starts for the first time. No default logins exist and no two instances share a secret.
  • HTTPS for web consoles and APIs. Where a product has a web console or HTTP ingest API, it is served over HTTPS with a per-instance certificate. Log shippers such as Fluent Bit, Fluentd and rsyslog have no web console.
  • Locked-down network posture. Log ingest ports such as syslog and Fluent forward stay closed in the security group until you explicitly open them to your own networks. Internal services are bound to localhost.

Pricing is metered hourly per EC2 instance type and is the same for every version in this listing. The recommended instance type is m5.large.

How to pick a version

  • Open the listing on AWS Marketplace, choose View purchase options, then choose Subscribe. One subscription covers every product and release in the listing, and the free trial starts with it.
  • When the subscription is active, choose Launch your software.
  • Choose One-click launch from AWS Marketplace, or Launch from EC2 Console for full control. In Version, choose the product and release you want. Each version is named <product> <release> on <operating system> - <date>, for example Fluent Bit 5.1.4 on Ubuntu 24.04 - YYYY-MM-DD. The date is when that version was added to the listing.
  • Choose your Region, an instance type (m5.large is recommended) and your EC2 key pair. Select a security group that opens the ports listed in the product's guide, then choose Launch.
  • After launch, open the product's guide below for first login.

You can run several products from the same subscription. Launch one instance per product, each from its own software version.

Versions in this listing, newest release first:

  • Fluent Bit: 5.1.4 on Ubuntu 24.04
  • Fluentd: 1.19.4 on Ubuntu 24.04
  • Gigapipe: 5.5.3 on Ubuntu 24.04
  • Grafana Loki: 3.7.9 on Ubuntu 24.04
  • Logdy: 0.17.1 on Ubuntu 24.04
  • OpenObserve: 1.1.2 + Vector 0.60.0 on Ubuntu 24.04, 1.1.2 on Ubuntu 24.04
  • OpenSearch: 3.9.0 + Fluent Bit 5.1.4 on Ubuntu 24.04
  • Parseable: 3.2.5 on Ubuntu 24.04
  • rsyslog: 8.2312.0 on Ubuntu 24.04
  • Vector: 0.60.0 on Ubuntu 24.04
  • VictoriaLogs: 1.53.0 on Ubuntu 24.04

Security model

Every version in this listing follows the same model:

  • No default login. Administrator passwords, database passwords and application secrets are generated on the first boot of each instance and written to a root-only file. No two instances share a secret.
  • Only the documented ports. Each guide lists the ports the product needs. Open only those in your security group.
  • Internal services on localhost. Databases and caches listen on 127.0.0.1 only. Never open database ports (3306, 5432, 6379) to the internet.
  • Patched base. The operating system is fully patched when the image is built.
  • HTTPS from first boot. These versions serve HTTPS with a per-instance certificate from first boot: Gigapipe 5.5.3 on Ubuntu 24.04, Grafana Loki 3.7.9 on Ubuntu 24.04, Logdy 0.17.1 on Ubuntu 24.04, OpenObserve 1.1.2 + Vector 0.60.0 on Ubuntu 24.04, OpenObserve 1.1.2 on Ubuntu 24.04, OpenSearch 3.9.0 + Fluent Bit 5.1.4 on Ubuntu 24.04, Parseable 3.2.5 on Ubuntu 24.04, Vector 0.60.0 on Ubuntu 24.04 and VictoriaLogs 1.53.0 on Ubuntu 24.04. The other versions open no web port (80/443). You manage them over SSH, and their guides list the ports they use.

Choose your product

Each entry lists the product, then the software version name to select at launch. Every version runs on Ubuntu 24.04. Open the guide for that version.

  • Fluent Bit: Fluent Bit 5.1.4 on Ubuntu 24.04
  • Fluentd: Fluentd 1.19.4 on Ubuntu 24.04
  • Gigapipe: Gigapipe 5.5.3 on Ubuntu 24.04
  • Grafana Loki: Grafana Loki 3.7.9 on Ubuntu 24.04
  • Logdy: Logdy 0.17.1 on Ubuntu 24.04
  • OpenObserve: OpenObserve 1.1.2 + Vector 0.60.0 on Ubuntu 24.04
  • OpenObserve: OpenObserve 1.1.2 on Ubuntu 24.04
  • OpenSearch: OpenSearch 3.9.0 + Fluent Bit 5.1.4 on Ubuntu 24.04
  • Parseable: Parseable 3.2.5 on Ubuntu 24.04
  • rsyslog: rsyslog 8.2312.0 on Ubuntu 24.04
  • Vector: Vector 0.60.0 on Ubuntu 24.04
  • VictoriaLogs: VictoriaLogs 1.53.0 on Ubuntu 24.04

How to tell which version you launched

The version you chose appears on the instance's launch record in the EC2 console (AMI name and description) and in your AWS Marketplace subscription. On the instance itself, the login message after SSH names the product and its credentials file. Then open the matching guide above for the rest of the walk-through.

Support

SecureAnyCloud provides 24/7 support for every version in this listing through the AWS Marketplace support channel. Raise a ticket in the Marketplace console or email sales@secureanycloud.com.

All product and company names are trademarks or registered trademarks of their respective holders. Use of them does not imply any affiliation with or endorsement by them.

Deploy on AWS

Launch Hardened OpenSearch, Grafana Loki & Log Management AMIs with 24/7 support from SecureAnyCloud.

View this image

Need Help?

Our support team is available 24/7.

sales@secureanycloud.com

Deploy on AWS