[Original] Graylog2 Installation notes under Centos 7.3, centosgraylog2

[Original] Graylog2 Installation notes under Centos 7.3, centosgraylog2

 

1. Open graylog2 official documentation, address: http://docs.graylog.org/en/2.0/pages/installation/docker.html#configuration

2. find useful information from the document for installation. Here, the installation method is docker installation, including graylog2/server: 2.1.2-1, mongo: 3, elasticsearch: 2.3 "first, create the mounted file directory and the file, as shown in the following figure: Docker-compose.ymlIt will be OK.

mkdir /graylog/configcd /graylog/configwget https://raw.githubusercontent.com/Graylog2/graylog2-images/2.0/docker/config/graylog.confwget https://raw.githubusercontent.com/Graylog2/graylog2-images/2.0/docker/config/log4j2.xml

Docker-compose.ymlThe file content is as follows:

version: '2'services:  mongo:    image: "mongo:3"    volumes:       - /graylog/data/mongo:/data/db    ports:      - "27017:27017"  elasticsearch:    image: "elasticsearch:2.3"    volumes:      - /graylog/data/elasticsearch:/usr/share/elasticsearch/data    command: "elasticsearch -Des.cluster.name='graylog'"    ports:      - "9200:9200"      - "9300:9300"  graylog:    image: graylog2/server:2.1.2-1    volumes:      - /graylog/data/journal:/usr/share/graylog/data/journal      - /graylog/config:/usr/share/graylog/data/config    environment:      GRAYLOG_WEB_ENDPOINT_URI: http://192.168.30.190:9000/api      #GRAYLOG_REST_TRANSPORT_URI: http://127.0.0.1:12900    depends_on:      - mongo      - elasticsearch    ports:      - "9000:9000"      - "12900:12900"

Note: 192.168.30.190 is the ip address of the Intranet server,

In the example provided on the official website, the version of graylog2/server is 2.0.3-2. during actual installation according to this version, I encountered a problem. I changed it to 2.1.2-1 to OK and marked 1.

In addition, I have encountered several problems over the past few days, mainly for the part marked with 2.
At the earliest time, this parameter was not configured according to the first blog on the Internet.

 

172.23.0.4 is the ip address of the graylog docker container, so it is changed to the same configuration on the official website, that is

Result:

So I thought 127.0.0.1 was the ip address of the local machine. At this time, I logged on to the visual graphical interface of the centos7 Virtual Machine and found that it could be accessed normally. However, I used the local window host to check whether an error was reported, as shown in the error code. I tried and thought twice, check the official website documentation. It seems that the configuration of 127.0.0.1 restricts access only to the local machine, so it is changed to http: // 192.168.30.190: 9000,192.168 .30.190, which is the ip address of centos7, and the result is OK.

 

Note that the official website has set the login name. I have no use and deleted it.