Collect from every source
Orbitron agents, edge collectors, syslog, REST API and webhook ingestion, with disk queueing so nothing is lost during outages.
Collect logs from agents, syslog, APIs and webhooks, search them and turn correlated events into prioritized alerts. Everything runs and stays in your data center.

Capabilities
Orbitron agents, edge collectors, syslog, REST API and webhook ingestion, with disk queueing so nothing is lost during outages.
Field queries across hosts and containers, saved searches and quick filters by rule, severity and status.
Time-window correlation across sources, reference data and rule packs tagged with MITRE ATT&CK.
Alerts carry event and asset context, move through review states and reach the right channel.
Turn an alert into a Resolve ITSM case or trigger a playbook directly from the rule.
On-premise by design: keep data as long as your hardware and policy allow, without per-day cloud retention fees.
Built from Orbitron modules
Every Orbitron product is a set of platform modules on the same agent. Products you add later reuse the modules you already have.
Optional add-ons
Licensing
Daily log volume (GB/day). Telemetry from licensed Orbitron agents is not counted; retention depends on your own storage.
Annual subscription, priced for your environment. Products bought together share the modules they have in common.
Request pricingIncluded with every subscription
Book a demo and we will show it on infrastructure like yours.