- 首先拉取官方镜像,然后查看确认镜像是否下载完成
[root@localhost graylog]# docker images REPOSITORY TAG IMAGE ID CREATED SIZE graylog/graylog 5.2 7f62f560e26c 4 days ago 538MB mongo latest 2e123a0ccb4b 2 weeks ago 757MB opensearchproject/opensearch latest c88bc2cd4d18 5 weeks ago 1.22GB
- 创建
docker-compose.yml
文件,以便一步简单启动,内容如下:version: '3' services: mongodb: image: mongo:latest container_name: mongodb ports: - "27017:27017" volumes: # 在主机创建目录,以便永久保存数据。 - /home/project/mongo/data:/data/db networks: - graylog-net opensearch: image: opensearchproject/opensearch:latest container_name: opensearch ports: - "9200:9200" volumes: # 设置存储目录,以便永久存储日志 - /home/project/opensearch/data:/usr/share/opensearch/data environment: - discovery.type=single-node # `Xms` specifies the initial memory allocation pool. `Xmx` specifies the maximum allocation pool for the Java Virtual Machine (JVM). "m" and "g" obviously stand for MB and GB. - ES_JAVA_OPTS=-Xms512m -Xmx1g # 需要关闭以下安全选项,否则无法连接 - plugins.security.ssl.http.enabled=false - plugins.security.disabled=true networks: - graylog-net graylog: image: graylog/graylog:5.2 container_name: graylog environment: # 配置项需以GRAYLOG_开头,并且是全大写的 # 密码加密值,不能小于16个字符 # 运行以下命令获取:< /dev/urandom tr -dc A-Z-a-z-0-9 | head -c${1:-96};echo; - GRAYLOG_PASSWORD_SECRET=输入你的 - GRAYLOG_HTTP_EXTERNAL_URI=http://0.0.0.0:9000/ - GRAYLOG_WEB_ENDPOINT_URI=http://0.0.0.0:9000/api # 运行以下命令获取:echo -n "Enter Password: " && head -1 </dev/stdin | tr -d '\n' | sha256sum | cut -d" " -f1 - GRAYLOG_ROOT_PASSWORD_SHA2=输入你的 #- GRAYLOG_REST_LISTEN_URI=http://0.0.0.0:12900/ - GRAYLOG_MONGODB_URI=mongodb://mongodb:27017/graylog # 虽然使用 opensearch,但设置项名称还是 elasticsearch 的 - GRAYLOG_ELASTICSEARCH_HOSTS=http://opensearch:9200 #- GRAYLOG_ELASTICSEARCH_USERNAME=admin #- GRAYLOG_ELASTICSEARCH_PASSWORD=admin # 配置时区 - GRAYLOG_ROOT_TIMEZONE=Asia/Shanghai ports: - "9000:9000" - "12201:12201/udp" networks: - graylog-net depends_on: - mongodb - opensearch networks: graylog-net: driver: bridge
- Graylog 启动:转到保存
docker-compose.yml
文件的目录内,运行docker-compose up -d
,就可以正常启动,然后登录 web 页面进行设置操作;
如果操作没问题应该不会出现下面的问题
- 第一次启动后,浏览器输入 http://graylog主机:9000,登录页面提示你输入用户名和密码。如果输入用户名:admin,密码:你自己设置的,无法登录的话,请输入以下命令
docker log graylog
查看 graylog 的 log,以便查找初始设置密码,一般如下提示;--- --- --- ######## ### ######### ########## #### #### --- .---- ---- ############### ###################### ##### #### --- ------------ .----------- -- ##### ###### ##### #### #### #### --- --- --- --- ----- #### #### #### ############ #### #### --- -- --- --- --- ### ### #### ############## #### #### --- --- -- -- -- #### #### #### #### #### #### #### --- --- -- -- .-- ##### ##### #### #### #### ####### --- --- --- --- --- ################ #### ############## ######- -- ---- ---- --- ----- ############## #### ############# ##### ----- ----------- ---------- -- #### #### --- ##### #### #### - .-- ############# #### ----- ---- ###### #### ------- ======================================================================================================== It seems you are starting Graylog for the first time. To set up a fresh install, a setup interface has been started. You must log in to it to perform the initial configuration and continue. Initial configuration is accessible at 0.0.0.0:9000, with username 'admin' and password 'xdxFeehggd'. ========================================================================================================