I had Graylog running awhile back and am now just getting time to get back to it. After creating the docker container again for Graylog, Mongo, and elasticsearch I ran into some issues.
Following the docker setup, the docker crashes. indicating that it can not write to the journal path.
2. Describe your environment:
Docker running under Unraid
Package Version: 4.3.9
Environment:
Name: graylog
Overview: Official Graylog Docker image.
For more variables see the Graylog configuration file: …
The default root user is named ‘admin’
To create the SHA256 string run ‘echo -n YOUR16CHARACTERPASSWORD | sha256sum’
Additional Requirements:
Repository: graylog/graylog:4.3.9
Docker Hub URL: Docker
Icon URL:
WebUI: http://[IP]:[PORT:9000]
Extra Parameters:
Post Arguments:
CPU Pinning:
Network Type: Host
Console shell command: Shell
Privileged: OFF
GRAYLOG_PASSWORD_SECRET: ••••••••••••••••
Container Variable: GRAYLOG_PASSWORD_SECRET
GRAYLOG_ROOT_PASSWORD_SHA2:
••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••
Container Variable: GRAYLOG_ROOT_PASSWORD_SHA2
GRAYLOG_HTTP_EXTERNAL_URI: http://10.71.74.23:9000/
Container Variable: GRAYLOG_HTTP_EXTERNAL_URI
Graylog web interface and REST API: 9000 (Container Port: 9000)
Syslog TCP: 1514 (Container Port: 1514)
Syslog UDP: 1514 (Container Port: 1514)
GELF TCP: 12201 (Container Port: 12201)
GELF UDP: 12201 (Container Port: 12201)
MongoDB connection string: mongodb://10.71.74.23:27017/graylog
Container Variable: GRAYLOG_MONGODB_URI
List of Elasticsearch hosts Graylog should connect to: 10.71.74.23:9200
Container Variable: GRAYLOG_ELASTICSEARCH_HOSTS
Need to be specified as a comma-separated list of valid URIs for the http ports of your elasticsearch nodes
Appdata: /mnt/user/appdata/greylog
Container Path: /usr/share/graylog/data/journal
Last line of Docker log:
“2022-12-27 15:56:07,662 ERROR: org.graylog2.bootstrap.preflight.PreflightCheckService - Preflight
check failed with error: Journal directory </usr/share/graylog/data/journal> is not writable!”
3. What steps have you already taken to try and solve the problem?
Found that the host path that had been created under appdata, had folder permissions that were set to root only from the docker setup, I adjusted the permissions to “drwxrwxr-x 1 root users 0 Dec 26 19:39 greylog/” and made sure that the users group had this folder.
4. How can the community help?
Has anyone run into this recently, I do not remember having this problem the last time I started to set things up. Since the users group has read/write to the folder I’m not sure where to look at the moment for the underlying cause.
strong text