Before you post: Your responses to these questions will help the community help you. Please complete this template if you’re asking a support question.
Don’t forget to select tags to help index your topic!
1. Describe your incident:
I’m attempting to install Graylog via docker compose. I get to the login screen and point of provisioning the certificate, but it fails to connect to the datanode instance.
2. Describe your environment:
-
OS Information: Ubuntu Server
-
Package Version: 22.04 LTS
-
Service logs, configurations, and environment variables:
version: “3.8”
For DataNode setup, graylog starts with a preflight UI, this is a change from just using OpenSearch/Elasticsearch.
Please take a look at the README at the top of this repo or the regular docs for more info.
services:
mongodb:
image: “mongo:5.0”
volumes:
- “mongodb_data:/data/db”
networks:
- graylog
restart: “on-failure”
For DataNode setup, graylog starts with a preflight UI, this is a change from just using OpenSearch/Elasticsearch.
Please take a look at the README at the top of this repo or the regular docs for more info.
datanode:
image: “${DATANODE_IMAGE:-graylog/graylog-datanode:5.2}”
hostname: “localhost”
environment:
GRAYLOG_DATANODE_NODE_ID_FILE: “/var/lib/graylog-datanode/node-id”
GRAYLOG_DATANODE_PASSWORD_SECRET: “${GRAYLOG_PASSWORD_SECRET}”
GRAYLOG_DATANODE_ROOT_PASSWORD_SHA2: “${GRAYLOG_ROOT_PASSWORD_SHA2}”
GRAYLOG_DATANODE_MONGODB_URI: “mongodb://mongodb:27017/graylog”
ulimits:
memlock:
hard: -1
soft: -1
nofile:
soft: 65536
hard: 65536
ports:
- “8999:8999/tcp” # DataNode API
- “9200:9200/tcp”
- “9300:9300/tcp”
volumes:
- “graylog-datanode:/var/lib/graylog-datanode”
networks:
- graylog
restart: “on-failure”
graylog:
hostname: “server”
image: “${GRAYLOG_IMAGE:-graylog/graylog:5.2}”
depends_on:
mongodb:
condition: “service_started”
entrypoint: “/usr/bin/tini – /docker-entrypoint.sh”
environment:
GRAYLOG_NODE_ID_FILE: “/usr/share/graylog/data/data/node-id”
GRAYLOG_PASSWORD_SECRET: “${GRAYLOG_PASSWORD_SECRET}”
GRAYLOG_ROOT_PASSWORD_SHA2: “${GRAYLOG_ROOT_PASSWORD_SHA2}”
GRAYLOG_HTTP_BIND_ADDRESS: “0.0.0.0:9000”
GRAYLOG_HTTP_EXTERNAL_URI: “http://localhost:9000/”
GRAYLOG_MONGODB_URI: “mongodb://mongodb:27017/graylog”
ports:
- “5044:5044/tcp” # Beats
- “5140:5140/udp” # Syslog
- “5140:5140/tcp” # Syslog
- “5555:5555/tcp” # RAW TCP
- “5555:5555/udp” # RAW TCP
- “9000:9000/tcp” # Server API
- “12201:12201/tcp” # GELF TCP
- “12201:12201/udp” # GELF UDP
#- “10000:10000/tcp” # Custom TCP port
#- “10000:10000/udp” # Custom UDP port
- “13301:13301/tcp” # Forwarder data
- “13302:13302/tcp” # Forwarder config
volumes:
- “graylog_data:/usr/share/graylog/data/data”
- “graylog_journal:/usr/share/graylog/data/journal”
networks:
- graylog
restart: “on-failure”
volumes:
mongodb_data:
graylog-datanode:
graylog_data:
graylog_journal:
networks:
graylog:
driver: bridge
ipam:
config:
subnet: 172.18.0.0/24
3. What steps have you already taken to try and solve the problem?
I’ve tried changing the hostname in the docker compose, adding a specific network for connectivity.
4. How can the community help?
I need help getting graylog up and running successfully.
Helpful Posting Tips: Tips for Posting Questions that Get Answers [Hold down CTRL and link on link to open tips documents in a separate tab]