System Architecture - Single Process

Single-Process Deployment (Basic Installation)

n its most basic form, XPLG is deployed as a single-process system, providing a complete, self-contained platform for data ingestion, processing, and analysis.

This deployment model includes all core components required to operate XPLG end-to-end, including:

• Web-based user interface (UI)

• Data collection and ingestion mechanisms

• Processing and indexing engines

• Analytics, visualization, and alerting capabilities

XPLG operates using file system–based storage for both data and configuration management, eliminating the need for external dependencies and simplifying deployment and maintenance.

This architecture is ideal for:

• Initial deployments and evaluations

• Small to mid-scale environments

• Use cases requiring fast setup with minimal infrastructure

Architecture Overview

The diagram below illustrates the core components of a single XPLG process and the end-to-end data flow—from ingestion to user-facing services:

• Data Sources & Ingestion
  Data is collected from a wide range of sources using both push (log shippers) and pull (agentless) methods.

• Data Collection & Processing Layer
  Incoming data is handled by collection engines and listeners, then processed, enriched, and indexed.

• Core Services Layer
  Includes key system components such as:

  • Indexing Engine

  • AI/ML Engine

  • Forwarding Manager

  • Data Repository

  • Access Control Management

• User Experience Layer
  Provides full operational capabilities through:

  • Search

  • Analytics

  • Dashboards and reporting

  • Monitoring and alerting

Open

Open

Getting Started

For detailed setup instructions, refer to the installation instructions.
If you require assistance with planning or deployment, the XPLG support team is available to help: support@xplg.com