Freedom251 › Log Management Software
LogTree
by LogTree

What LogTree is
LogTree is a self-hosted SIEM platform from LogTree for collecting, storing, analyzing, and preserving log evidence. Its Local AI interface supports natural-language questions about stored logs. The collector accepts Syslog over UDP or TCP on port 514, then writes data to Kafka and raw archive segments. The described pipeline uses Kafka as a durable buffer and indexing layer for parsing and ingest-time alerts, with ClickHouse as the columnar store. Raw log text is retained with a SHA-256 seal chain; the product page also shows AES-256 and daily sealing. Retention policies can be configured by source. ANYIT reports reference-configuration results of 50K events per second on one node and p95 filtered search under one second across 100 million records, noting that actual results vary. It also reports zstd archives at one tenth of raw log size. Offline installation supports closed networks. ANYIT offers a four-week PoC covering sizing, integration, validation, and a TCO report.
Who it suits
LogTree suits organizations needing self-hosted log collection, retention, search, and evidence controls. Its offline deployment option fits closed-network environments.
What it does well
- Natural-language log searching
- Syslog UDP/TCP ingestion on port 514
- Source-specific retention policies
- SHA-256 seal chain for raw logs
- Offline closed-network installation
What to know first
- Pricing is available only on request
- Reported performance is reference-configuration data
- Actual results may vary
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| LogTree | Pricing not stated; contact ANYIT for a 4-week PoC and sizing proposal | On request |
As anyit.net lists them, read 12 Oct 2026. The maker's own page has the final word.
Verdict
LogTree provides a self-hosted SIEM workflow with structured ingestion, searchable storage, retention controls, and sealing features. Prospective users must request pricing and should treat published performance figures as reference measurements rather than guarantees.
Facts from LogTree's own pages
- Compression
- ANYIT reports columnar storage with zstd archives at one tenth of raw log size. · anyit.net, 12 Oct 2026
- Deployment
- The PoC page says installation can be offline in a closed network, indicating an on-premises deployment option. · anyit.net, 12 Oct 2026
- Founded
- 2004 · anyit.net, 28 Sept 2026
- Headquarters
- Gyeongsan, Gyeongbuk, South Korea · anyit.net, 28 Sept 2026
- Ingestion
- The collector accepts Syslog over UDP/TCP port 514 and writes logs to Kafka and raw archive segments. · anyit.net, 12 Oct 2026
- Integrity
- Raw log text is retained alongside a SHA-256 seal chain, and the page shows AES-256 and daily sealing. · anyit.net, 12 Oct 2026
- Live log tailing
- Yes · anyit.net, 22 Sept 2026
- Log pipelines
- Yes · anyit.net, 22 Sept 2026
- Maker
- The maker is ANYIT Co., Ltd., whose company page says it was founded in July 2004 and gives its head office as Gyeongsan, Gyeongbuk, Korea. · anyit.net, 12 Oct 2026
- Natural-language search
- Users can search logs by asking questions in plain language. · anyit.net, 12 Oct 2026
- Performance claims
- ANYIT reports 50K EPS on a single node and p95 filtered search under one second over 100 million records; it says these are internal reference-configuration measurements and actual results vary. · anyit.net, 12 Oct 2026
- Pipeline
- The product page describes Kafka as a durable buffer, an indexer for parsing and ingest-time alerts, and ClickHouse as the columnar store. · anyit.net, 12 Oct 2026
- PoC
- ANYIT offers a four-week PoC covering requirements and sizing, installation and integration, measured validation, and a report with TCO comparison. · anyit.net, 12 Oct 2026
- Purpose
- LogTree is presented as a SIEM platform with Local AI for log collection, storage, analysis and evidence. · anyit.net, 12 Oct 2026
- Retention
- Retention policies can be set per source, allowing different retention periods for regulated and high-volume logs. · anyit.net, 12 Oct 2026
- Security certification
- ANYIT lists ISO/IEC 27001:2025 information security management certification. · anyit.net, 12 Oct 2026
- Structured log parsing
- Yes · anyit.net, 22 Sept 2026
- Support
- ANYIT lists technical support at 1660-3389 and [email protected], and its contact page states weekday availability from 09:00 to 18:00 and 24/7 incident response. · anyit.net, 12 Oct 2026
Where LogTree stands on Freedom251
- Log Management Software#106 of 111