I had Graylog running awhile back and am now just getting time to get back to it. After creating the docker container again for Graylog, Mongo, and elasticsearch I ran into some issues.
Following the docker setup, the docker crashes. indicating that it can not write to the journal path.
2. Describe your environment:
Docker running under Unraid
Package Version: 4.3.9
Overview: Official Graylog Docker image.
For more variables see the Graylog configuration file: …
The default root user is named ‘admin’
To create the SHA256 string run ‘echo -n YOUR16CHARACTERPASSWORD | sha256sum’
Docker Hub URL: Docker
Network Type: Host
Console shell command: Shell
Container Variable: GRAYLOG_PASSWORD_SECRET
Container Variable: GRAYLOG_ROOT_PASSWORD_SHA2
Container Variable: GRAYLOG_HTTP_EXTERNAL_URI
Graylog web interface and REST API: 9000 (Container Port: 9000)
Syslog TCP: 1514 (Container Port: 1514)
Syslog UDP: 1514 (Container Port: 1514)
GELF TCP: 12201 (Container Port: 12201)
GELF UDP: 12201 (Container Port: 12201)
MongoDB connection string: mongodb://10.71.74.23:27017/graylog
Container Variable: GRAYLOG_MONGODB_URI
List of Elasticsearch hosts Graylog should connect to: 10.71.74.23:9200
Container Variable: GRAYLOG_ELASTICSEARCH_HOSTS
Need to be specified as a comma-separated list of valid URIs for the http ports of your elasticsearch nodes
Container Path: /usr/share/graylog/data/journal
Last line of Docker log:
“2022-12-27 15:56:07,662 ERROR: org.graylog2.bootstrap.preflight.PreflightCheckService - Preflight
check failed with error: Journal directory </usr/share/graylog/data/journal> is not writable!”
3. What steps have you already taken to try and solve the problem?
Found that the host path that had been created under appdata, had folder permissions that were set to root only from the docker setup, I adjusted the permissions to “drwxrwxr-x 1 root users 0 Dec 26 19:39 greylog/” and made sure that the users group had this folder.
4. How can the community help?
Has anyone run into this recently, I do not remember having this problem the last time I started to set things up. Since the users group has read/write to the folder I’m not sure where to look at the moment for the underlying cause.