Skip to content

Latest commit

 

History

History
77 lines (51 loc) · 2.31 KB

README.md

File metadata and controls

77 lines (51 loc) · 2.31 KB
Raw

Graylog2 CoreOS Cluster

Container-based deployment of Graylog2 on CoreOS. Includes:

  • Elasticsearch container that registers itself with etcd for generating ES clusters
  • Mongo container for schema
  • Graylog2-server container
  • Graylog2-web container
  • systemd service files for CoreOS's fleet

Future extensions:

  • Vulcand or HAProxy load-balancer front-end

Instructions (for CoreOS)

  • Firstly, start the Mongo service:
fleetctl submit [email protected]
fleetctl start [email protected]
  • ElasticSearch:
fleetctl submit elasticsearch@{1,2,3,4}.service
fleetctl start elasticsearch@{1,2}.service
fleetctl start elasticsearch@{3,4}.service

(launching in stages to give the gossip servers a chance to register with etcd)

  • Graylog2-server
fleetctl submit graylog2-server@{1,2,3}.service
fleetctl start graylog2-server@{1,2,3}.service
  • Graylog2-web
fleetctl submit [email protected]
fleetctl start [email protected]

Notes

Graylog2-server and Elasticsearch containers must currently run on different CoreOS machines (enforced in the service files).

Admin password is currently yourpasswd, but this can be changed if a PASSWORD environment variable is set and passed into the docker run command in the graylog2-server service file.

All registrations in etcd are carried out in the /graylog2/ namespace.

Currently, all service files point to containers located at DockerHub (carsondial/*). These need to be changed to point at an internal registry.

Docker Environment Variables

  • ElasticSearch

    • ELASTICSEARCH_HOSTS - comma-separated list of existing ES hosts (pulled from etcd at service start
    • HOST_IP - IP address for new node to announce for transport (ES containers are bound to the CoreOS machines' ports, so you can currently only run one per machine)

  • Mongo

    • none (uses standard DockerHub image)

  • Graylog2-Server

    • ELASTICSEARCH_HOSTS - comma-separated list of ES hosts
    • MONGODB_HOST - as above but for MongoDB
    • HOST_IP - external IP for graylog2 to announce (binds to external ports, so again, one server per CoreOS host
    • PASSWORD - to override default password, pass in a sha256 hash, e.g. echo -n yourpassword | shasum -a 256

  • Graylog2-Web

    • GRAYLOG2_HOSTS - list of Graylog2-server hosts