Install (docker-based) Enterprise Plugin not working

Hello,

I would like to install enterprise plugin on my wonderful graylog instance, but i does not work. :pensive:

I use docker-compose to run graylog.
This is my docker-compose.yml file :

version: '2'
    services:
      # MongoDB: https://hub.docker.com/_/mongo/
      mongodb:
    image: mongo:3
      # Elasticsearch: https://www.elastic.co/guide/en/elasticsearch/reference/6.x/docker.html
      elasticsearch:
    image: docker.elastic.co/elasticsearch/elasticsearch-oss:6.8.2
    environment:
      - http.host=0.0.0.0
      - transport.host=localhost
      - network.host=0.0.0.0
      - "ES_JAVA_OPTS=-Xms512m -Xmx512m"
    ulimits:
      memlock:
        soft: -1
        hard: -1
    mem_limit: 1g
      # Graylog: https://hub.docker.com/r/graylog/graylog/
      graylog:
    image: graylog/graylog:3.1
    volumes:
      # Mount local configuration directory into Docker container
      - ./graylog/plugin/graylog-plugin-enterprise-3.1.3.jar:/usr/share/graylog/plugin/graylog-plugin-enterprise-3.1.3.jar
    environment:
      # CHANGE ME (must be at least 16 characters)!
      - GRAYLOG_PASSWORD_SECRET=secret
      # Password: admin
      - GRAYLOG_ROOT_PASSWORD_SHA2=secret
      - GRAYLOG_HTTP_EXTERNAL_URI=http://X.X.X.X:9000/
    links:
      - mongodb:mongo
      - elasticsearch
    depends_on:
      - mongodb
      - elasticsearch
    ports:
      # Graylog web interface and REST API
      - 9000:9000
      # Syslog TCP
      - 1514:1514
      # Syslog UDP
      - 1514:1514/udp

When i enter in contenair, i can see the file mounted

$ ls -lisa plugin
total 29484
 393771     4 drwxrwxr-x 1 graylog graylog     4096 Nov 13 07:37 .
 393729     8 drwxr-xr-x 1 graylog graylog     4096 Nov  6 13:12 ..
 393772 20704 -rw-rw-r-- 1 graylog graylog 21198838 Nov  6 11:45 graylog-plugin-aws-3.1.3.jar
 393773  3644 -rw-rw-r-- 1 graylog graylog  3730009 Nov  6 11:44 graylog-plugin-collector-3.1.3.jar
2228240     4 drwxr-xr-x 2 root    root        4096 Nov 12 22:22 graylog-plugin-enterprise-3.1.3.jar
 393774  5120 -rw-rw-r-- 1 graylog graylog  5239610 Nov  6 11:46 graylog-plugin-threatintel-3.1.3.jar

But in web console, the plugin status is :

My only idea is on “graylog-plugin-enterprise-3.1.3.jar” file permissions.

Does somebody have a good idea?

Thank you very much for your help

2 Likes

Hello
Am i the only people how have this kind of problem ?

sorry @chauchse

I did not have seen this in the past in my environment. Would need to test that, but that will not happen in the next hours …

Line about enterprise plugin file is somehow weird:

2228240     4 drwxr-xr-x 2 root    root        4096 Nov 12 22:22 graylog-plugin-enterprise-3.1.3.jar

Permissions shows that it is directory (drwxr-xr-x) and not file, you probably only created directory with name graylog-plugin-enterprise-3.1.3.jar.

1 Like

Yes you’re right… It’s a so idiot mistake… :dizzy_face:

Thanks.

I keep you inform if it works.

This is the status of Graylog Enterprise modules in this cluster:

  • Graylog Plugin Enterprise is installed

Graylog 3.1.3+cda805f on fb8401d4a4f7 (Oracle Corporation 1.8.0_232 on Linux 4.15.0-66-generic)

Thank’s again for your help @shoothub

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.