Sold by: ProvenCloud
Deployed on AWS
Free Trial
This is a repackaged open source software product wherein additional charges apply for a secure, ready-to-use Graylog 7.1 log management server. Collect, search and alert on logs from all your systems in one place, with unique passwords for every instance.
Overview
Graylog is a log management platform for collecting, storing and searching logs from servers, applications, containers and network devices in one place. IT and security teams use it to find the cause of errors quickly, keep logs for audits, and get alerts when patterns appear. This image gives operations teams a working Graylog server in minutes, with the search back end and database already set up.
What is included: Graylog 7.1.9 on Ubuntu 24.04 LTS with its search back end, MongoDB, Nginx as a reverse proxy on port 80 and Mongo Express for database browsing. Graylog's external address follows the instance's public IP automatically. Security is on by default: no password ships in the image. On first boot every instance sets its own Graylog admin and Mongo Express passwords and a new Graylog password secret, the database and search services listen only on the server itself, and SSH accepts key-based login only.
What you get on top of the free software: a pre-built and tested image that is ready in minutes, a unique security setup for every server, simple scripts for changing passwords, regular image updates, and help by email whenever you need it. Graylog Open is licensed under SSPL, and MongoDB Community Server under SSPL. Graylog is a trademark of Graylog, Inc., and MongoDB is a trademark of MongoDB, Inc. This image is an independent build by ProvenCloud.
Highlights
- Ready in minutes: launch the instance, open its public IP in your browser and sign in. Graylog 7.1, its search back end, MongoDB and Mongo Express are already installed and configured.
- Secure by default: no shared or default passwords. Every instance sets its own Graylog and Mongo Express passwords on first boot and a new Graylog password secret is generated, and SSH accepts key-based login only.
- Find problems fast: send logs from servers, apps and network devices, search them in seconds, build dashboards and get alerts when something goes wrong.
Details
Sold by
Categories
Delivery method
Delivery option
64-bit (x86) Amazon Machine Image (AMI)
Latest version
Operating system
Ubuntu 24.04
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Free trial
Try this product free for 5 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time. Alternatively, you can pay upfront for a contract, which typically covers your anticipated usage for the contract duration. Any usage beyond contract will incur additional usage-based costs.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
- ...
Dimension | Cost/hour |
|---|---|
t3a.large Recommended | $0.04 |
c3.2xlarge | $0.10 |
c3.4xlarge | $0.10 |
c3.8xlarge | $0.10 |
c4.2xlarge | $0.10 |
c4.4xlarge | $0.10 |
c4.8xlarge | $0.10 |
c5.12xlarge | $0.10 |
c5.2xlarge | $0.10 |
c5.4xlarge | $0.10 |
Dimensions summary
You pay by the hour for the software on your running instance. The many options you see are simply the EC2 instance types you can launch this image on. They are not feature tiers; every instance runs the same log management stack. Pricing scales with instance size and family. Larger sizes within a family (xlarge up to metal) carry more compute and memory, so their hourly rate is higher. Compute, storage, and memory-optimized families (c, m, r, and others) suit different workloads. You add AWS infrastructure charges on top. Pick the instance that matches your capacity needs.
Top-of-mind questions for buyers
The hourly rate covers the pre-built log management software on your running instance. It does not include AWS infrastructure. You pay separately for compute, the 30 GiB root volume, and data transfer. The software is open-source and needs no licence key, so the charge is for the packaged, hardened image.
The hourly software charge applies only while the instance runs. A stopped instance accrues no software fee. You may still pay AWS for the attached storage volume that holds your data. Charges resume when you start the instance again, billed per running hour.
No. Every instance type runs the same software stack, with the same components and versions. Larger types give more CPU and memory for handling higher log volumes, not extra features. You pick size for capacity, not capability. The hourly rate rises with instance size.
www.provencloud.io
Helpful?
Vendor refund policy
Software charges are billed hourly, only while your instance runs. You can stop charges at any time by terminating the instance or cancelling your subscription. Charges already incurred are not refundable.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Existing servers keep running as they are and need no action. New launches get this version. To apply the same Ubuntu security fixes to a server you already run, connect over SSH and run sudo apt update && sudo apt full-upgrade.
Graylog 7.2.2 (was 7.1.9) on Ubuntu 24.04 LTS with MongoDB, OpenSearch, Nginx and Mongo Express, with all current Ubuntu security updates, including the Brotli library fix for CVE-2026-111497.
The unused OpenSearch Security Analytics plugin is no longer installed; Graylog does not use it.
Unique Graylog and Mongo Express passwords and a new password secret are set for every instance on first boot.
Includes helper scripts in /home/ubuntu/iscripts for changing passwords.
Additional details
Usage instructions
Once the instance is running, enter http://<instance-public-ip> into your browser. Wait about five minutes the first time while Graylog starts, then sign in with admin as the username and your instance ID as the password. Mongo Express is at http://<instance-public-ip>:8081; sign in with admin and your instance ID. You can also connect over SSH with the username ubuntu and your Amazon key pair.
Required inbound ports: 22 (SSH), 80 (Graylog) and 8081 (Mongo Express). When you add a Graylog input, for example Syslog on port 1514, open that port only to the machines that send logs. For security, allow ports 22 and 8081 only from your own IP address.
Your instance ID is shown in the EC2 console, for example i-0123456789abcdef0. Every instance sets its own passwords on first boot, so no two instances share a password.
Change your passwords after the first sign-in: connect over SSH and run sudo bash /home/ubuntu/iscripts/pass_graylog.sh for Graylog or pass_mongoexpress.sh for Mongo Express, from the same folder.
The image serves plain HTTP so it works on a bare IP address. Before using it in production, add your own domain and an SSL certificate, or place it behind a load balancer with HTTPS.
Resources
Vendor resources
Support
Vendor support
Email: support@provencloud.io
Support page: https://www.provencloud.io/support
Hours: Monday to Friday, 10:00 to 19:00 IST (UTC+05:30)
Billing and refunds for this subscription are handled by AWS Marketplace.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
![Grafana & Prometheus Monitoring on Ubuntu 24.04 LTS by ProvenCloud [IN]](https://d7umqicpi7263.cloudfront.net/img/product/5838cc82-fb02-4c1f-9062-52d501de2ad6.com/4c173b409be2aeb8869f955151e879be)
This is a repackaged open source software product wherein additional charges apply for a secure, ready-to-use Grafana 13 and Prometheus monitoring server. Collect metrics and build dashboards and alerts in minutes, with unique passwords for every instance.
![MariaDB with phpMyAdmin on Ubuntu 24.04 LTS by ProvenCloud [IN]](https://d7umqicpi7263.cloudfront.net/img/product/1cbaaade-4f15-414b-8097-92a56865c603.com/4c173b409be2aeb8869f955151e879be)
This is a repackaged open source software product wherein additional charges apply for a secure, ready-to-use MariaDB 12.3 LTS database server with phpMyAdmin. Get a tuned, MySQL-compatible database for your applications in minutes, sized to your instance automatically, with unique passwords for every instance.
![GitLab Community Edition on Ubuntu 24.04 LTS by ProvenCloud [IN]](https://d7umqicpi7263.cloudfront.net/img/product/84bd4eca-7d97-4dd6-9a70-24837f37e3dd.com/4c173b409be2aeb8869f955151e879be)
This is a repackaged open source software product wherein additional charges apply for a secure, ready-to-use GitLab Community Edition 19.5.1 server. Host your Git repositories, run CI/CD pipelines and track issues on your own server, with a CI runner already registered and unique passwords for every instance.
![Zabbix Monitoring Server on Ubuntu 24.04 LTS by ProvenCloud [IN]](https://d7umqicpi7263.cloudfront.net/img/product/e066553c-7aac-424c-b970-a6f20ced1ebf.com/4c173b409be2aeb8869f955151e879be)
This is a repackaged open source software product wherein additional charges apply for a secure, ready-to-use Zabbix 7.4 monitoring server. Monitor servers, networks and applications and get alerts when something goes wrong, with unique passwords for every instance.
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.