graylog2.md

Graylog2 0.20.0 Debian packages

• graylog2-server (Current: 0.20.1)
• graylog2-web (Current: 0.20.1)
• graylog2-radio Current: 0.20.0)
• graylog2-stream-dashboard (Current: 0.90.0)

Debian Repro URL

     deb http://finja.brachium-system.net/~jonas/packages/graylog2_repro/ wheezy main

Vagrant Box available

• https://github.com/hggh/graylog2-vagrant

Install Debian pre depends on your system

    apt-get install mongodb-server openjdk-7-jre-headless uuid-runtime adduser

Install Elasticsearch from Upstream

• download

    wget https://download.elasticsearch.org/elasticsearch/elasticsearch/elasticsearch-0.90.10.deb
  
    dpkg -i elasticsearch-0.90.10.deb
  

• configuration of Elasticsearch (/etc/elasticsearch/elasticsearch.yml)

• Add to configuration:

  • cluster.name: graylog2

Install Graylog2 Packages

• Install GPG Key from Jonas Genannt GPG Stats

   apt-key adv --keyserver pgp.surfnet.nl --recv-keys 016CFFD0
  

• Add Graylog2 Apt Repro:

    echo 'deb http://finja.brachium-system.net/~jonas/packages/graylog2_repro/ wheezy main' > /etc/apt/sources.list.d/graylog2.list
  

• Install Graylog2 Packages:

    apt-get update && apt-get install graylog2-server graylog2-web
  

• Install Graylog2 Stream Dashboard

    apt-get install graylog2-stream-dashboard
  

• OR: manually download deb files: http://finja.brachium-system.net/~jonas/packages/graylog2/

enable init script

• Graylog2 Server

    sed -i 's@no@yes@' /etc/default/graylog2-server
  

• Graylog2 Webinterface

    sed -i 's@no@yes@' /etc/default/graylog2-web
  

Configuration of Graylog2

Edit /etc/graylog2/server/server.conf

change parameters, see configuration:

• password_secret
• root_password_sha2

Edit /etc/graylog2/web/graylog2-web-interface.conf

change parameters

• graylog2-server.uris="http://127.0.0.1:12900/"
• application.secret

start service

• Graylog2 Server

    /etc/init.d/graylog2-server start
  

• Graylog2 Webinterface

    /etc/init.d/graylog2-web start
  

• Elasticsearch

    /etc/init.d/elasticsearch
  

access the web interface

http://localhost:9000/

• Username: admin
• Password: (see /etc/graylog2/server/server.conf)

Graylog2 official documentation

http://support.torch.sh/help/kb/graylog2-web-interface/installing-graylog2-web-interface-v0200-previewx-on-nix-systems

Source of Graylog2 packages are available

• https://github.com/hggh/graylog2-web
• https://github.com/hggh/graylog2-server
• https://github.com/hggh/graylog2-radio