Having a look a graylog but it wont work

Graylog Central (peer support)
1

Following this,

http://docs.graylog.org/en/latest/pages/installation/docker.html

I copy and pasted in this,

$ docker run --name mongo -d mongo:3
$ docker run --name elasticsearch \
    -e "http.host=0.0.0.0" -e "xpack.security.enabled=false" \
    -d docker.elastic.co/elasticsearch/elasticsearch:5.5.1
$ docker run --link mongo --link elasticsearch \
    -p 9000:9000 -p 12201:12201 -p 514:514 \
    -e GRAYLOG_WEB_ENDPOINT_URI="http://127.0.0.1:9000/api" \
    -d graylog/graylog:2.3.0-1

and it wont work.

in the elasticsearch logs reported by rancher it looks like lack of a resource?

/10/2017 2:40:31 PM[2017-10-03T01:40:31,628][INFO ][o.e.n.Node               ] [qcFsUKS] starting ...
3/10/2017 2:40:31 PM[2017-10-03T01:40:31,848][INFO ][o.e.t.TransportService   ] [qcFsUKS] publish_address {172.17.0.3:9300}, bound_addresses {0.0.0.0:9300}
3/10/2017 2:40:31 PM[2017-10-03T01:40:31,860][INFO ][o.e.b.BootstrapChecks    ] [qcFsUKS] bound or publishing to a non-loopback or non-link-local address, enforcing bootstrap checks
3/10/2017 2:40:31 PMERROR: [1] bootstrap checks failed
3/10/2017 2:40:31 PM[1]: max virtual memory areas vm.max_map_count [65530] is too low, increase to at least [262144]

I am on ubuntu 16.04 as a vm on vmware esx6. The spec of the VM is 2 pcu and 6gb of ram.

I assume somehow I need to give elesticsearch more vm.max_map_count? how do I do this?

Also why is the default too small to run the setup for testing?

2

To answer my own Q it seems the default vm.max_map_count ie virtual memory is too low as per, elasticdocs

So to fix it,

cd /etc/sysctl.d/
vi 99-docker.conf

and add,

vm.max_map_count=262144

and reboot

3

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.