Shulou(Shulou.com)06/01 Report--

How to deploy the Graylog log system, in view of this problem, this article introduces the corresponding analysis and answer in detail, hoping to help more partners who want to solve this problem to find a more simple and easy way.

Graylog is a centralized log management solution comparable to ELK, which supports data collection, retrieval and visualization Dashboard. This section will practice using Graylog to manage Docker logs.

Graylog architecture

Graylog is responsible for receiving logs from various devices and applications and providing users with Web access interfaces.

Elasticsearch is used to index and save logs received by Graylog.

MongoDB is responsible for saving the configuration information of Graylog itself.

Like ELK, Graylog's deployment solution is flexible, building an all-in-one environment quickly is good for learning, and deploying a highly available, highly scalable cluster is also necessary for a build environment.

Next we will build Graylog in the container environment.

Deploy Graylog

Graylog and its related components will be deployed as containers.

MongoDB

Docker run-- name graylog-mongo-d mongo:3

Elasticsearch

Docker run-name graylog-elasticsearch d elasticsearch:2 elasticsearch Des.cluster.name= "graylog"

Graylog

Docker run-- link graylog-mongo:mongo\-- link graylog-elasticsearch:elasticsearch\-- p 9000 link graylog-mongo:mongo 9000\-p 12201:12201/udp\-e GRAYLOG_WEB_ENDPOINT_URI= "http://192.168.56.101:9000/api">

Configure Graylog

Currently, Graylog cannot receive any logs. We need to configure an Input and click on the top menu System-> Inputs.

Graylog supports multiple Input types, and the Docker logging driver that interfaces with Graylog is gelf, so here we need to run an Input of type GELF UDP.

Select the Graylog container in the Node list.

The Title is named docker GELF input.

Others remain at default values, where port 12201 is the port that was mapped to Host when the container was started earlier to receive log data.

Click Input to run successfully.

Now that Graylog is ready, you can send the container's log to Graylog.

This is the answer to the question on how to deploy the Graylog log system. I hope the above content can be of some help to you. If you still have a lot of doubts to solve, you can follow the industry information channel for more related knowledge.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.