FredSeidel
June 14, 2017, 3:24pm
1
Hey,
quick Question regarding the Graylog OVA.
I’ve set up the VM and configured most of the things via the graylog-ctl.
Thanks,
jochen
June 14, 2017, 4:12pm
2
No. The OVA and the Omnibus distribution of Graylog are supposed to be configured exclusively through the graylog-ctl utility.
If you need more flexibility (also take a look at http://docs.graylog.org/en/2.2/pages/configuration/graylog_ctl.html#advanced-settings ), you’ll have to install Graylog by other means such as the official DEB or RPM packages.
FredSeidel
June 15, 2017, 7:22am
3
Thanks for the infos!
I want to test out this content pack: https://marketplace.graylog.org/addons/750b88ea-67f7-47b1-9a6c-cbbc828d9e25 and it requires leading Wildcard searches to be enabled…
jochen
June 15, 2017, 10:28am
4
No, you can activate this in the advanced settings:
default['graylog']['graylog-server']['plugin_dir'] = "/opt/graylog/plugin"
default['graylog']['graylog-server']['content_packs_loader_enabled'] = true
default['graylog']['graylog-server']['content_packs_dir'] = "/opt/graylog/contentpacks"
default['graylog']['graylog-server']['content_packs_auto_load'] = "grok-patterns.json,content_pack_appliance.json"
default['graylog']['graylog-server']['rest_listen_uri'] = "http://0.0.0.0:9000/api"
default['graylog']['graylog-server']['web_listen_uri'] = "http://0.0.0.0:9000/"
default['graylog']['graylog-server']['retention_strategy'] = "delete"
default['graylog']['graylog-server']['elasticsearch_shards'] = 4
default['graylog']['graylog-server']['elasticsearch_replicas'] = 1
default['graylog']['graylog-server']['elasticsearch_index_prefix'] = "graylog"
default['graylog']['graylog-server']['allow_leading_wildcard_searches'] = true
default['graylog']['graylog-server']['allow_highlighting'] = false
default['graylog']['graylog-server']['elasticsearch_cluster_name'] = "graylog"
default['graylog']['graylog-server']['elasticsearch_network_host'] = "0.0.0.0"
default['graylog']['graylog-server']['elasticsearch_http_enabled'] = false
default['graylog']['graylog-server']['elasticsearch_cluster_discovery_timeout'] = 5000
default['graylog']['graylog-server']['elasticsearch_discovery_initial_state_timeout'] = "3s"
default['graylog']['graylog-server']['elasticsearch_analyzer'] = "standard"
default['graylog']['graylog-server']['output_batch_size'] = 500
default['graylog']['graylog-server']['output_flush_interval'] = 1
default['graylog']['graylog-server']['output_fault_count_threshold'] = 5
system
June 29, 2017, 10:28am
5
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.
