由于官方推荐使用Graylog-Datanode作为Graylog的日志数据节点,其已经内置了OpenSearch2.9.13
且众多网友还是比较倾向于CentOS系的系统
例如RockyLinux9.7及AlmaLinux9.7,因此重新制作了最新的GrayLog7.0.5的EL9系统下的一键安装脚本
其中的主要组件版本信息
#!/bin/bash
#关闭SELINUX
sed -i 's/enforcing/disabled/g' /etc/selinux/config
setenforce 0
#解压安装包
mkdir -p /opt/GrayLog_install
tar -zxvf ./GrayLog7.0.5_MongoDB8.2.5_DataNode7.0.5_EL9_RPM.tar.gz -C /opt/GrayLog_install
cat > /etc/yum.repos.d/mongodb-org.repo << \EOF
[mongodb-org-8.2]
name=MongoDB Repository
baseurl=https://repo.mongodb.org/yum/redhat/9/mongodb-org/8.2/x86_64/
gpgcheck=0
enabled=1
EOF
cd /opt/GrayLog_install
#安装mongodb-server服务
rpm -ivh cyrus-sasl*.rpm
rpm -ivh mongodb*.rpm
#启动mongodb-server服务
systemctl daemon-reload
systemctl enable mongod.service
systemctl start mongod.service
systemctl --type=service --state=active | grep mongod
firewall-cmd --add-port=27017/tcp --permanent --zone=public
firewall-cmd --reload
#安装graylog-datanode(其内置OpenSearch)
rpm -ivh /opt/GrayLog_install/graylog-datanode-7.0.5-2.x86_64.rpm
#Ensure that the Linux setting vm.max_map_count is set to at least 262144
echo'vm.max_map_count=262144' | sudo tee -a /etc/sysctl.d/99-graylog-datanode.conf
sysctl --system
cat /proc/sys/vm/max_map_count
#根据官方文档openssl rand -hex 32命令随机生成password_secret
#可以自行使用sudo openssl rand -hex 32命令随机生成password_secret并在/etc/graylog/datanode/datanode.conf文件中进行替换
sed -i "s/password_secret =/password_secret = 923d7af5ae3049978a19d328bea02935c2400688222e3b0f0217b6d159af5e47/g" /etc/graylog/datanode/datanode.conf
#修改graylog-datanode中opensearch日志数据存储目录到/data目录下,方便后期扩容
mkdir -p /data/graylog-datanode/opensearch/data
mkdir -p /data/graylog-datanode/opensearch/logs
chown -R graylog-datanode:graylog-datanode /data/graylog-datanode
sed -i "s|opensearch_data_location = /var/lib/graylog-datanode/opensearch/data|opensearch_data_location = /data/graylog-datanode/opensearch/data/|g" /etc/graylog/datanode/datanode.conf
sed -i "s|opensearch_logs_location = /var/log/graylog-datanode/opensearch|opensearch_logs_location = /data/graylog-datanode/opensearch/logs/|g" /etc/graylog/datanode/datanode.conf
systemctl daemon-reload
systemctl enable graylog-datanode.service
systemctl start graylog-datanode.service
#安装graylog-server服务
rpm -ivh /opt/GrayLog_install/graylog-server-7.0.5-2.x86_64.rpm
cp /etc/graylog/server/server.conf /etc/graylog/server/server.conf_default
#修改graylog-server相关配置文件
sed -i "s/password_secret =/password_secret = 923d7af5ae3049978a19d328bea02935c2400688222e3b0f0217b6d159af5e47/g" /etc/graylog/server/server.conf
sed -i "s/root_password_sha2 =/root_password_sha2 = fdf5e0ba25719d981ae4bd3edd465d71fb91e1d113bdf62a0b0a9963711163ef/g" /etc/graylog/server/server.conf
sed -i "s@#root_timezone = UTC@root_timezone = Asia/Shanghai@g" /etc/graylog/server/server.conf
sed -i "s@#http_bind_address = 127.0.0.1:9000@http_bind_address = 0.0.0.0:9000@g" /etc/graylog/server/server.conf
sed -i "s/allow_highlighting = false/allow_highlighting = true/g" /etc/graylog/server/server.conf
#修改graylog-server启动时JVM内存大小
sed -i "s/-Xms1g -Xmx1g/-Xms2g -Xmx2g/g" /etc/sysconfig/graylog-server
firewall-cmd --add-port=9000/tcp --permanent --zone=public
firewall-cmd --reload
#启动graylog-server服务
systemctl daemon-reload
systemctl restart graylog-server
systemctl enable graylog-server
#请根据最后graylog-server日志文件中的登录账号与密码 浏览器登录Graylog Web界面进行初始化
#tail -f /var/log/graylog-server/server.log | grep "0.0.0.0:9000"
以上脚本是针对RHEL9.X/CentOS9.X等EL9系列系统的一键安装脚本
将如下脚本与压缩包上传到AlmaLinux9.X或RockyLinux9.X系统的同一个目录下GrayLog7.0.5_MongoDB8.2.5_DataNode7.0.5_EL9_RPM.tar.gzGrayLog7.0.5_Datanode7.0.5_MongoDB8.2.5_EL9_install.shaaa
然后sh GrayLog7.0.5_Datanode7.0.5_MongoDB8.2.5_EL9_install.sh 执行一键安装脚本即可

(图片点击放大查看)
下面是安装过程的截图


(图片点击放大查看)
tail -f /var/log/graylog-server/server.log

(图片点击放大查看)


(图片点击放大查看)

(图片点击放大查看)

(图片点击放大查看)

(图片点击放大查看)
安装完成后Graylog的登录账号密码为admin/Graylog@2025

(图片点击放大查看)

(图片点击放大查看)
GrayLog7.0.5 EL9一键安装脚本与压缩包下载链接请在添加本文作者微信【yuanfan2012】入群获取