A flat monthly software fee with zero markup on log volume, storage, or processing — you pay AWS at cost. Runs entirely in your own AWS account, so no data ever leaves your VPC. OpenSearch + Athena from a single CloudFormation deploy.
Subscribe on AWS Marketplace See PricingA production-ready log pipeline from a single CloudFormation deploy — the differentiators that matter.
Everything runs inside your own VPC with isolated subnets and VPC endpoints — no internet egress, no data leaving your network boundary. The seller never touches your data.
One flat monthly software fee with zero markup on log volume, storage, or processing. You pay AWS at cost — predictable pricing that doesn't scale with your log bill.
Full-text search in OpenSearch and SQL analytics in an Athena datalake from the same pipeline — pre-built dashboards, index patterns, and Glue tables included.
50+ built-in regex detectors for PII, PHI, financial, secret, and SQL patterns — redact, filter, or tag inline during processing. No extra cost, no data leaves your VPC.
Centralize logs from multiple AWS accounts into a single pipeline via account list and/or AWS Organization — each account's logs tagged and queryable (Enterprise tier).
Isolated subnets, KMS encryption at rest, S3 access logging, and TLS-enforced transport out of the box — meets FedRAMP, HIPAA, PCI-DSS, and SOC 2 network isolation requirements.
Find Log Processor on AWS Marketplace and subscribe.
Deploy the CloudFormation stack selecting your tier, domain, and certificate ARN.
Configure your log subscriptions and start querying.
Essential tier and above include OpenSearch — the domain initializes automatically during deployment (~15-25 minutes).
Software fee only. AWS infrastructure costs are billed directly by AWS to your account.
No. Everything runs inside your VPC with isolated subnets and no internet egress. Logs flow from CloudWatch → Firehose → S3 → Lambda → OpenSearch/Athena, all within your account. AWS services are accessed exclusively through VPC endpoints — no data ever leaves your network boundary. The seller has no access to your account, data, or infrastructure. The only external call is a periodic entitlement check to AWS Marketplace to verify your subscription.
Yes. The Basic tier runs datalake-only — query logs with Athena SQL at approximately $5/month AWS infrastructure cost. Essential and above add OpenSearch for full-text search and dashboards. Subscriptions can target Athena and/or OpenSearch independently, so you can route verbose or high-volume logs to the datalake only (keeping OpenSearch costs low) while sending critical application and audit logs to both for real-time search and visualization.
Yes. Select a tier upgrade or downgrade (Essential | Advanced | Enterprise) and update the stack — node count, instance type, and volume changes are handled in-place via OpenSearch blue/green deployment with zero downtime (typically 15-30 minutes). Feature differences activate immediately based on your Marketplace entitlement dimension. Upgrading from Basic to Essential requires a stack delete and fresh deploy since it adds an OpenSearch domain, VPC, and dashboards infrastructure that cannot be added to an existing Basic stack. Your OpenSearch and S3 datalake remain unaffected during any tier change.
Yes, on the Enterprise tier. Provide the trusted account IDs during deployment. Each source account must create a CloudWatch Logs subscription filter pointing to the cross-account destination. Additionally, external accounts can replicate their S3 access logs to your stack's access log bucket using S3 replication rules — use the provided script(s) to configure partitioned access logging, IAM roles, and cross-account replication in minutes. All logs flow into the same pipeline — searchable in OpenSearch and queryable in Athena alongside your primary account's logs.
The default deployment uses isolated VPC subnets with no internet egress, KMS encryption at rest for all S3 buckets, SQS queues, and the datalake, S3 access logging for request auditing, and TLS-enforced secure transport on all bucket policies. All AWS service communication routes through VPC endpoints — no data traverses the public internet. This architecture meets network isolation requirements for FedRAMP, HIPAA, PCI-DSS, and SOC 2 compliance frameworks out of the box, with no additional configuration required.
A flat monthly software fee by tier — Basic $29, Essential $149, Advanced $299, Enterprise $599 — with zero markup on log volume, storage, or processing. AWS infrastructure costs are billed directly by AWS to your account at cost (the Basic datalake-only tier runs at approximately $5/month in AWS costs). Enterprise+ is a custom private offer. See Pricing for what each tier includes.
More questions? See the documentation.
Guides and reference materials
Prerequisites, deployment, post-setup, and first subscription walkthrough.
Subscription editor UI reference: fields, preview, discovery, maintenance, reports.
Reference for OpenSearch dashboards, and queries.
Comprehensive reference covering creating users, groups.
Comprehensive reference supporting SSO.
Comprehensive reference covering automatically extracting structured data.
Comprehensive reference covering Athena datalake.
Comprehensive reference for covering CloudWatch dashboard functionality.
Release notes and updates.
Pre-sales enquiries. Questions about Log Processor, licensing, or professional services? Contact us →
Already a customer? Product support is available from the Support button on your deployed application's landing page (alongside the Subscription Editor and OpenSearch Dashboards, per your plan's SLA), or email support@perfware.cloud.