Having a look a graylog but it wont work

(Gzcwnk) #1

Following this,


I copy and pasted in this,

$ docker run --name mongo -d mongo:3
$ docker run --name elasticsearch \
    -e "http.host=" -e "xpack.security.enabled=false" \
    -d docker.elastic.co/elasticsearch/elasticsearch:5.5.1
$ docker run --link mongo --link elasticsearch \
    -p 9000:9000 -p 12201:12201 -p 514:514 \
    -d graylog/graylog:2.3.0-1

and it wont work.

in the elasticsearch logs reported by rancher it looks like lack of a resource?

/10/2017 2:40:31 PM[2017-10-03T01:40:31,628][INFO ][o.e.n.Node               ] [qcFsUKS] starting ...
3/10/2017 2:40:31 PM[2017-10-03T01:40:31,848][INFO ][o.e.t.TransportService   ] [qcFsUKS] publish_address {}, bound_addresses {}
3/10/2017 2:40:31 PM[2017-10-03T01:40:31,860][INFO ][o.e.b.BootstrapChecks    ] [qcFsUKS] bound or publishing to a non-loopback or non-link-local address, enforcing bootstrap checks
3/10/2017 2:40:31 PMERROR: [1] bootstrap checks failed
3/10/2017 2:40:31 PM[1]: max virtual memory areas vm.max_map_count [65530] is too low, increase to at least [262144]

I am on ubuntu 16.04 as a vm on vmware esx6. The spec of the VM is 2 pcu and 6gb of ram.

I assume somehow I need to give elesticsearch more vm.max_map_count? how do I do this?

Also why is the default too small to run the setup for testing?

(Gzcwnk) #2

To answer my own Q it seems the default vm.max_map_count ie virtual memory is too low as per, elasticdocs

So to fix it,

cd /etc/sysctl.d/
vi 99-docker.conf 

and add,


and reboot

(system) #3

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.