Sold by: XPLG
Deployed on AWS
LogX is the AI observability module of the XPLG AI Streams Platform. Instead of waiting for data to be indexed and then running rules over it, LogX scores the stream as it flows: Deep Text Inspection tokenizes every event, clusters machine signatures, learns normal behaviour per service and flags anomalies, new error patterns, rate shifts and correlated failures across services in real time. Native dictionaries and programmable signatures mean any team can read, validate and extend what the models look for. The result is service intelligence - which service is degrading, what changed, which upstream dependency is implicated - delivered as events, dashboards and alerts, and cuts mean time to resolution by up to 80 percent. New stream models ship continuously through the platform image, so detection improves without a redeploy.
Overview
LogX is the AI observability intelligence module of the XPLG AI Streams Platform: anomaly detection, clustering and pattern discovery applied to live telemetry and log streams, not to yesterday's index.
Detect in flight. Deep Text Inspection tokenizes events at one million events per second, clusters machine signatures and learns per-service baselines. Anomalies, new error patterns, rate and latency shifts, and correlated failures across services surface within seconds of appearing in the stream.
Explainable AI. Native dictionaries, signatures and algorithms are readable and programmable: operators can validate, tune and extend what the models flag. No black box, no six-week tuning project before the first useful alert.
Service intelligence. LogX connects the dots between services, hosts and dependencies to show which service is degrading, what changed and where the root cause sits. Findings become events for PortX routing, dashboards in XpoLog and tickets in your workflow. Cuts MTTR up to 80 percent.
Always current. Stream models and dictionaries are delivered with the platform image and updated continuously; this AMI pulls the current patch on every boot. XPLG Model Credits are included with the license.
Deployment: runs as the XPLG X8 container stack on this AMI; the same image runs on Kubernetes, VMs and on-prem. Single node to a 2-6 server cluster. Licensed per node. Data stays in your AWS account; subscription on your AWS bill.
Highlights
- AI anomaly detection in flight: Deep Text Inspection, signature clustering and per-service baselines score live telemetry at one million events per second, surfacing anomalies, new error patterns and correlated failures within seconds. Cut MTTR up to 80 percent.
- Explainable and programmable: native dictionaries, signatures and algorithms any team can read, validate and extend. No black-box models, no multi-week tuning project before the first useful alert.
- Service intelligence, continuously updated: findings link services, hosts and dependencies to root cause and flow to PortX, XpoLog and your ticketing. Stream models ship with the platform image and arrive on every boot. Same image on this AMI, Kubernetes, VMs and on-prem.
Details
Sold by
Categories
Delivery method
Delivery option
64-bit (x86) Amazon Machine Image (AMI)
Latest version
Operating system
AmazonLinux 4.14.133-113.112.amzn2.x86_64
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Cost/hour |
|---|---|
m7i.2xlarge Recommended | $15.63 |
m7a.xlarge | $8.33 |
c7i-flex.4xlarge | $17.50 |
c5d.4xlarge | $17.50 |
c6i.xlarge | $4.58 |
m5dn.4xlarge | $19.75 |
c5.4xlarge | $17.50 |
c7i-flex.2xlarge | $11.46 |
c5a.4xlarge | $17.50 |
m5a.xlarge | $8.33 |
Dimensions summary
You pay by the hour based on the EC2 instance type you run LogX on. Each dimension maps to a specific instance size, so the software bills per running hour of the instance you choose. Instance families cover compute-focused (c-series) and general-purpose (m-series, t-series) options, with sizes ranging from xlarge to 4xlarge. Pricing scales with the size and class of instance you select: a 4xlarge runs at a different hourly rate than an xlarge. You match the instance type to your log monitoring workload and processing needs.
Top-of-mind questions for buyers
Each dimension maps to one EC2 instance type, billed per running hour. You pay only for hours the instance actively runs. A fully stopped instance stops accruing software charges. Underlying AWS storage or reserved resources may still bill separately, but the LogX software meters running time only.
Your bill is driven entirely by the EC2 instance type and its running hours, not by log volume directly. You pick an instance sized to your log monitoring workload. Larger instances process more data per hour but bill at a different hourly rate. Data volume affects which instance you need, not a separate charge.
Compute-focused c-series instances suit log processing that leans on heavy pattern recognition and anomaly detection. General-purpose m-series and t-series instances balance compute and memory for mixed monitoring workloads. You match the family and size to your log throughput and analysis needs. Each choice bills at its own hourly rate.
www.xplg.com
Helpful?
Vendor refund policy
We do not currently support refunds, but you can cancel at any time.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
XPLG X8 8.2.0 - Release Notes (AWS Marketplace)
LogX LogX adds AI anomaly detection, clustering and pattern discovery on top of ingested logs. In 8.2 it runs on the platform's AI layer and XMC credits, exposing detected patterns and anomalies in the XpoLog console and as events for PortX routing. No separate model deployment is required; models are included in the image. General XPLG X8 8.2.0 moves the AWS Marketplace listing to the X8 container platform: one image, five products, one license model and one workspace. The AMI runs the same xplg-service Compose stack used on Docker, Podman, Kubernetes and VMs, so a Marketplace node behaves exactly like any other X8 node - same roles (master, server, processor), same .env, same Traefik edge on 80/443, and the same path from a single node to a cluster of two to six servers. The instance pulls the current 8.2 patch on every boot, so patches reach you without a new AMI; only major versions require a new listing version. Console on :30304/logeye/ (or :80/:443 via Traefik); node data on the instance's local NVMe/SSD, shared configuration optionally on EFS.
Security updates The platform runs as a non-root service (uid 30303, gid 0) on Amazon Linux 2023 with OS security patches applied at build and at boot. No default credentials ship with the image: security is activated on first sign-in, and every instance generates its own identity. The host exposes only the role ports (30304-30308 HTTP, 30444-30448 HTTPS, 80/443 with Traefik, 514 for syslog sources) and no SSH keys or registry credentials are present in the AMI. Deployments register to your XPLG Dock workspace so licenses, usage and support tickets are tied to the node that produced them.
AI native 8.2 is the first X8 release with the AI layer built into the base image rather than added per product. Every workspace receives XMC (XPLG Model Credits) with its evaluation license, metered against the same usage view as GB/day and streams. LogX anomaly detection, Audity identity intelligence and the in-console assistant all draw on this layer, and the same credits follow the deployment from evaluation to production.
Flux Flux delivers ultra-fast file sync and streaming between clouds and on-prem storage, now available on AWS as a licensed product in the X8 image. Use it to move raw logs, archives and model artifacts between S3, other clouds and the node's local disk at line rate, with the transfer metered per stream alongside the other X8 products.
PortX PortX is the data streams pipeline control plane for observability and security: collect, control, reduce, secure. In 8.2 it runs as a role in the X8 stack, so a single node can ingest, reduce and route to downstream SIEMs and observability backends while sharing configuration with the rest of the platform. Licensing is GB/day; the node reports consumption to your Dock workspace.
XpoLog XpoLog provides log management and analysis - augmented search, monitoring and apps - on the X8 platform. 8.2 brings the updated console (/logeye/), the Traefik-fronted entry on standard ports and the shared-configuration directory, so search apps, dashboards and monitors created on one node are available across the cluster.
LogX LogX adds AI anomaly detection, clustering and pattern discovery on top of ingested logs. In 8.2 it runs on the platform's AI layer and XMC credits, exposing detected patterns and anomalies in the XpoLog console and as events for PortX routing. No separate model deployment is required; models are included in the image.
Audity Audity brings AI identity intelligence, audit and compliance: it correlates identity activity across the collected sources, highlights anomalous access and produces audit-ready evidence. On 8.2 it is licensed per identity and shares the node, data paths and AI credits with the rest of the X8 stack, so enabling it is a license change, not a new deployment.
Need from engineering before publishing: exact feature deltas vs 8.1 per product, any schema/config migrations, known issues, and the minimum instance size you want stated (16 GB RAM evaluation / 32-128 GB production per dock).
Additional details
Usage instructions
After deploying the instance, click on Manage in AWS Console to see the running instance and public DNS address to continue the configuration of the product. Connect to the Web UI via the public DNS address: http://<public DNS address>:30303.
Resources
Vendor resources
Support
Vendor support
XPLG provides support for this product to all AWS Marketplace subscribers.
Support portal and knowledge base: https://support.xplg.com Deployment, licensing and usage portal: https://dock.xplg.com/support Email: support@xplg.com Phone (USA): +1 888 482 4770 Phone (Israel): +972 3 656 5265
Standard support is included with every subscription: ticket response within one business day (Sunday to Friday, 08:00 to 18:00 Israel time), access to documentation, release notes and product updates. Deployment assistance for this AMI (network, ports, data volume, sources and destinations) is included during the first 30 days.
Premium and 24x7 support with defined SLAs, a named engineer and quarterly reviews are available through a private offer. Contact sales@xplg.com .
When opening a ticket, include the AMI version, instance type, the output of ./verify.sh and docker compose logs master.
Refund policy
All subscriptions to this product are non-refundable. Hourly and usage-based charges are billed by AWS for time consumed and are not refunded. Annual and private-offer contracts are non-cancellable and non-refundable for the full term. Charges resulting from unused capacity, idle instances, or customer-side misconfiguration are not eligible for credit. For billing questions contact sales@xplg.com . AWS infrastructure charges are governed by AWS policies.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
PortX sits between your sources and your destinations and makes the stream itself intelligent. It collects logs, metrics and events once - syslog, agents, cloud APIs, Kafka, files - and applies parsing, filtering, deduplication, sampling, masking of sensitive fields, enrichment and schema transformation while the data is in motion. Routed outputs go to Splunk, Sentinel, Google SecOps, Elastic, S3, Snowflake, OpenTelemetry backends or XpoLog, each receiving exactly the shape and volume it needs. Teams use PortX to cut SIEM and observability ingestion cost 30-70 percent, to migrate between platforms with zero ETL rewrite, and to keep PII and secrets out of downstream tools. Native AI dictionaries and signatures classify streams automatically so the first policy is minutes, not weeks, away.
Audity is the identity intelligence module of the XPLG AI Streams Platform. It consumes identity and activity streams - directory and IAM, SSO, cloud audit trails, SaaS, databases, applications, endpoints - and unifies them into one behavioral timeline per user, service account and device. Enrichment with MITRE ATT&CK, Sigma and UDM happens in the stream, and AI models score behaviour as it occurs: unusual access, privilege escalation, dormant accounts waking up, impossible travel, data movement outside pattern, identity drift between systems. Security teams get insider risk and account compromise in real time; GRC and audit teams get a queryable trail that answers who did what, where, when and with which rights, cutting audit and compliance preparation by 70-90 percent.
Anomali delivers the first Intelligence-Native Agentic SOC Platform unifying a fully featured security data lake, threat intelligence, and agentic AI into a single modern experience. The platform accelerates detection, investigation, and response; delivering earlier insights, faster action, and scalable modernization across any environment.
XpoLog is the search, visualization and monitoring module of the XPLG AI Streams Platform. It indexes logs and telemetry from any source - applications, servers, network devices, cloud services, containers, databases - and gives teams augmented search with automatic parsing, pattern discovery and correlation across sources. Hundreds of ready apps ship dashboards and monitors for common technologies; alerts fire on rules, thresholds and anomalies. Because the stream is reduced, masked and enriched by the platform before indexing, XpoLog stores less and searches faster, which is how it delivers terabyte-scale log management at roughly half the cost of legacy tools. Deploy in hours on this AMI, grow to a cluster, and keep the same console on Kubernetes, VMs or on-prem.
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.