FWIW, Graylog is not SaaS but can/should/must be installed on-premise: https://www.graylog.org/