KDMKHONDEEMECO., LTD.

Software

KDM Logger

Centralized log management built for Thai Computer Crime Act compliance.

KDM Logger collects logs from network devices, servers and applications, indexes it for fast search, and moves aged data into encrypted, tamper-evident archives — so your organization can retain and produce computer traffic data when the law requires it.

Request information

Product tour

KDM Logger — System overview
Collectors, cluster health, input endpoints and storage by log category on one screen.

Screens captured from a running KDM Logger deployment.

Key capabilities

  • Many log inputs

    Syslog over UDP, TCP or TLS (RFC 3164 / 5424), Beats agents, an HTTP JSON API and OpenTelemetry (OTLP) — from firewalls, switches, servers and applications.

  • Search and live stream

    The most recent 90 days stay indexed in Elasticsearch. Query with Lucene syntax, use built-in presets, or watch events arrive live.

  • Alerts and webhooks

    Alert rules watch services, infrastructure, storage and network, with incident history and webhook notifications.

  • Compliance reports

    Events are mapped to Thai CCA Section 26, PDPA, GDPR, NIST SP 800-53, PCI-DSS and HIPAA controls, with report generation and CSV export.

  • Encrypted, tamper-evident archives

    Aged indices are encrypted with AES-256-GCM and recorded in SHA-256 hash-chained manifests signed with Ed25519, so any modification is detectable.

  • Archives are never auto-deleted

    Archives are written once to S3 with Object Lock (Compliance mode) or to an NFS share as read-only files, and kept until an administrator explicitly removes them.

Appliance sizing

A ready-to-deploy hardware appliance in three sizes, or a virtual edition on your own hypervisor in five license tiers. Pick by events per second and daily log volume.

  • KDM-LOG-S1

    Small

    Small enterprise

    EPS peak
    15,000EPS peak
    per day, sustained
    ~50 GBper day, sustained
    days searchable
    90days searchable
    CPU
    Xeon Silver 4410Y · 12C/24T
    Memory
    64 GB DDR5
    Hot storage
    7.68 TB NVMe
    Network
    2 × 1GbE

  • KDM-LOG-M1

    Medium

    Medium enterprise

    EPS peak
    30,000EPS peak
    per day, sustained
    ~200 GBper day, sustained
    days searchable
    90days searchable
    CPU
    Xeon Gold 5416S · 16C/32T
    Memory
    128 GB DDR5
    Hot storage
    30.72 TB NVMe
    Network
    2 × 10GbE

  • KDM-LOG-L1

    Large

    Large enterprise

    EPS peak
    60,000EPS peak
    per day, sustained
    ~500 GBper day, sustained
    days searchable
    90days searchable
    CPU
    Xeon Gold 6438Y+ · 32C/64T ×1–2
    Memory
    256 GB DDR5
    Hot storage
    46.08 TB NVMe
    Network
    4 × 10GbE + 2 × 25GbE
Full hardware comparison
H3C UniServer R4700 G6 (1U)
SpecificationKDM-LOG-S1SmallKDM-LOG-M1MediumKDM-LOG-L1Large
Server platform
Server modelH3C UniServer R4700 G6H3C UniServer R4700 G6H3C UniServer R4700 G6
Form factor1U rack1U rack1U rack
User environmentSmall enterpriseMedium enterpriseLarge enterprise
Performance
Peak events per second15,000 EPS30,000 EPS60,000 EPS
Sustained daily ingest~50 GB/day~200 GB/day~500 GB/day
Searchable retention90 days90 days90 days*
Processing
CPU sockets111–2
ProcessorIntel Xeon Silver 4410Y (2.0 GHz)Intel Xeon Gold 5416S (2.0 GHz)Intel Xeon Gold 6438Y+ (2.0 GHz) ×1–2
Cores / threads12C / 24T16C / 32T32–64C / 64–128T
Memory
Total memory64 GB128 GB256 GB
Configuration2 × 32 GB DDR5 RDIMM 56004 × 32 GB DDR5 RDIMM 56008 × 32 GB DDR5 RDIMM 5600
Storage
OS drives2 × 480 GB SSD (RAID 1)2 × 480 GB SSD (RAID 1)2 × 960 GB SSD (RAID 1)
Hot data drives4 × 1.92 TB NVMe8 × 3.84 TB NVMe12 × 3.84 TB NVMe
Usable data~7.68 TB~30.72 TB~46.08 TB
RAIDEmbedded RAID 1Embedded RAID 1+0Embedded RAID 1+0
Network
Management1 × 1GbE (HDM/IPMI)1 × 1GbE (HDM/IPMI)1 × 1GbE (HDM/IPMI)
Data network2 × 1GbE (onboard)2 × 10GbE (OCP 3.0)4 × 10GBase-T (OCP 3.0)
Log collectionShared with data network2 × 1GbE (onboard)2 × 25GbE (PCIe)
Power & physical
Power supply1 × 800 W Platinum1+1 × 800 W Platinum (redundant)1+1 × 1300 W Platinum (redundant)
Typical power draw~250 W~450 W~750 W
Dimensions (H × W × D)42.9 × 434.6 × 777 mm42.9 × 434.6 × 777 mm42.9 × 434.6 × 777 mm
Compliance & security
StandardsFCC, CEFCC, CE, RoHS, ULFCC, CE, RoHS, UL
Hardware securityTPM 2.0TPM 2.0, SGX 2.0TPM 2.0, SGX 2.0, PFR 3.0
Server managementH3C HDM StandardH3C HDM + iFISTH3C HDM + iFIST + UniSystem
Support
Warranty1 year (installation, on-site, remote)1 year (installation, on-site, remote)1 year (installation, on-site, remote)
Extended supportOptional 3 yearsOptional 3 yearsOptional 5 years
  • Peak EPS is burst capacity; daily volume is the sustained average. Sizing assumes ~500-byte events, 0.7× compression and 10% index overhead.
  • * L1: 90 days at ~500 GB/day assumes a single data copy. Replicated deployments need additional storage.
  • After 90 days, data moves to encrypted, write-once archive storage. Specifications are subject to change — contact us for a sizing review.
Request a sizing review

Use cases

  • Service providers that must retain computer traffic data under Section 26
  • Enterprises centralizing firewall, network and server logs
  • Security teams that need searchable evidence for incident investigation