1、包括四块内容：
mongodb
elasticsearch
graylog-server
graylog-web
2、#安装mongodb
vim /etc/yum.repos.d/mongodb.repo [mongodb-org-3.0] name=MongoDB Repository baseurl=http://repo.mongodb.org/yum/redhat/$releasever/mongodb-org/3.0/x86_64/ gpgcheck=0 enabled=1 yum clean all yum makecache fast yum install -y mongodb-org systemctl start mongod systemctl enable mongod
3、#安装elasticsearch
rpm --import https://packages.elastic.co/GPG-KEY-elasticsearch vim /etc/yum.repos.d/elasticsearch.repo --- [elasticsearch-1.5] name=Elasticsearch repository for 1.5.x packages baseurl=http://packages.elastic.co/elasticsearch/1.5/centos gpgcheck=1 gpgkey=http://packages.elastic.co/GPG-KEY-elasticsearch enabled=1 --- yum clean all yum makecache fast yum install elasticsearch -y vi /etc/elasticsearch/elasticsearch.yml cluster.name: graylog [root@graylog yum.repos.d]# systemctl start elasticsearch [root@graylog yum.repos.d]# systemctl enable elasticsearch curl localhost:9200
4、#安装graylog
yum -y install java-1.8.0-openjdk.x86_64 wget https://packages.graylog2.org/repo/el/7/1.3/x86_64/graylog-web-1.3.4-1.noarch.rpm wget https://packages.graylog2.org/repo/el/7/1.3/x86_64/graylog-server-1.3.4-1.noarch.rpm rpm -ivh graylog-server-1.3.4-1.noarch.rpm graylog-web-1.3.4-1.noarch.rpm [root@graylog ~]# /usr/share/graylog-server/bin/graylog-server start OpenJDK 64-Bit Server VM warning: ignoring option PermSize=128m; support was removed in 8.0 OpenJDK 64-Bit Server VM warning: ignoring option MaxPermSize=256m; support was removed in 8.0 [root@graylog ~]# /usr/share/graylog-web/bin/graylog-web start Play server process ID is 15776 Oops, cannot start the server. java.lang.IllegalStateException: No application.secret configured. at lib.Global.onStart(Global.java:103) at play.core.j.JavaGlobalSettingsAdapter.onStart(JavaGlobalSettingsAdapter.scala:22) at play.api.GlobalPlugin.onStart(GlobalSettings.scala:220) at play.api.Play$$anonfun$start$1$$anonfun$apply$mcV$sp$1.apply(Play.scala:91) at play.api.Play$$anonfun$start$1$$anonfun$apply$mcV$sp$1.apply(Play.scala:91) at scala.collection.immutable.List.foreach(List.scala:318) at play.api.Play$$anonfun$start$1.apply$mcV$sp(Play.scala:91) at play.api.Play$$anonfun$start$1.apply(Play.scala:91) at play.api.Play$$anonfun$start$1.apply(Play.scala:91) at play.utils.Threads$.withContextClassLoader(Threads.scala:21) at play.api.Play$.start(Play.scala:90) at play.core.StaticApplication.(ApplicationProvider.scala:55) at play.core.server.NettyServer$.createServer(NettyServer.scala:253) at play.core.server.NettyServer$$anonfun$main$3.apply(NettyServer.scala:289) at play.core.server.NettyServer$$anonfun$main$3.apply(NettyServer.scala:284) at scala.Option.map(Option.scala:145) at play.core.server.NettyServer$.main(NettyServer.scala:284) at play.core.server.NettyServer.main(NettyServer.scala) 启动失败！查看日志： [root@graylog graylog-web]# cat /var/log/graylog-web/application.log 2022-03-18T16:39:42.150+08:00 - [ERROR] - from lib.Global in main Please configure application.secret in your conf/graylog-web-interface.conf 需要设置密码： yum install pwgen -y [root@graylog graylog-web]# pwgen -N 1 -s 96 2nPg81Q07R4rsHRjkiT8EBXNXEVECwmhgQJ3QKUcYni93ezGvsLPD6BotteBe5u0TKbJuyspqV2X6iail0mMqs5BgTnl6JB1 [root@graylog graylog-web]# echo -n 123456 | sha256sum 8d969eef6ecad3c29a3a629280e686cf0c3f5d5a86aff3ca12020c923adc6c92 - 需改server配置文件 [root@graylog graylog-web]# vim /etc/graylog/server/server.conf password_secret = 2nPg81Q07R4rsHRjkiT8EBXNXEVECwmhgQJ3QKUcYni93ezGvsLPD6BotteBe5u0TKbJuyspqV2X6iail0mMqs5BgTnl6JB1 #11行 root_password_sha2 = 8d969eef6ecad3c29a3a629280e686cf0c3f5d5a86aff3ca12020c923adc6c92 #22行 rest_listen_uri = http://127.0.0.1:12900/ #37行 elasticsearch_cluster_name = graylog2 #157行 [root@graylog graylog-web]# vim /etc/graylog/web/web.conf graylog2-server.uris="http://127.0.0.1:12900/" #2行 application.secret="2nPg81Q07R4rsHRjkiT8EBXNXEVECwmhgQJ3QKUcYni93ezGvsLPD6BotteBe5u0TKbJuyspqV2X6iail0mMqs5BgTnl6JB1" #12行 注意：/etc/graylog/web/web.conf中的graylog2-server.uris值必须与/etc/graylog/server/server.conf中的rest_listen_uri一致 关闭并重新启动server和web /usr/share/graylog-server/bin/graylog-server start & /usr/share/graylog-web/bin/graylog-web start & 访问 http://10.2.33.99:9000/system/inputs admin 123456
