Graylog 6 using opensearch needs elasticsearch for authentication?

[cdauray (Chad Dauray)]

Before you post: Your responses to these questions will help the community help you. Please complete this template if you’re asking a support question.
Don’t forget to select tags to help index your topic!

1. Describe your incident:
New instal of Graylog 6 on Ubuntu 22.
Followed this guide: Ubuntu Installation
Except step 5 of the ‘edit the graylog config file’ section:
‘5. Edit the elasticsearch_hosts setting to include a list of comma-separated URIs to one or more valid OpenSearch nodes.’
Just like the warning says, i cant use my root password.
do i simply install elasticsearch and run the command? do i need to configure elasticsearch first?

2. Describe your environment:

• OS Information:
  ubuntu 22
• Package Version:
  graylog 6
• Service logs, configurations, and environment variables:

3. What steps have you already taken to try and solve the problem?
verified graylog, mongod and opensearch services are running

4. How can the community help?
confirm i need elasticsearch and where i can find correct configuration

Helpful Posting Tips: Tips for Posting Questions that Get Answers [Hold down CTRL and link on link to open tips documents in a separate tab]

[gsmith]

Hey @cdauray

By default graylog will connect using localhost. if you are creating a OpenSearch cluster you can add user/password that has roles to connect to OpenSearch. This depends on how you set up your cluster.

For example without a user/password

elasticsearch_hosts = http://localhost:9200,http://172.168.1.100:9200,http://172.168.1.200:9200

once configured restart Graylog service, you should have OpenSearch install and reachable