graylog.conf
is_master = true
node_id_file = ~/node-id
password_secret =
0GfeFiddzix4IdYzTjT8PGSaYnTm5vYzaBk9QXyN12RhwSlIHHY1ewv3cIM4Cj5mgxRN9ImWeCqojc9hjvKDoS2ztrzY7igt
root_password_sha2 =
8c6976e5b5410415bde908bd4dee15dfb167a9c873fc4bb8a81f6f2ab448a918
root_timezone = Asia/Shanghai
plugin_dir = plugin
rest_listen_uri = http://192.168.99.100:12900/
web_listen_uri = http://192.168.99.100:9000/
rotation_strategy = count
elasticsearch_max_docs_per_index = 2000
elasticsearch_max_number_of_indices = 20
retention_strategy = delete
elasticsearch_shards = 4
elasticsearch_replicas = 0
allow_leading_wildcard_searches = false
allow_highlighting = false
elasticsearch_cluster_name = elasticsearch
elasticsearch_discovery_zen_ping_unicast_hosts = 192.168.99.100:9300
elasticsearch_analyzer = standard
output_batch_size = 500
output_flush_interval = 1
output_fault_count_threshold = 5
output_fault_penalty_seconds = 30
processbuffer_processors = 5
outputbuffer_processors = 3
processor_wait_strategy = blocking
ring_size = 65536
inputbuffer_ring_size = 65536
inputbuffer_processors = 2
inputbuffer_wait_strategy = blocking
message_journal_enabled = true
message_journal_dir = data/journal
lb_recognition_period_seconds = 3
mongodb_uri = mongodb://localhost/graylog
mongodb_max_connections = 1000
mongodb_threads_allowed_to_block_multiplier = 5
content_packs_auto_load = grok-patterns.json
elasticsearch.yml
network.host: 192.168.99.100
discovery.zen.ping.unicast.hosts: ["192.168.99.100"]
> java -Djava.net.preferIPv4Stack=true -jar graylog.jar server -f graylog.conf
> ~/graylog-2.0.3@sam-VirtualBox
2016-07-26 18:15:43,351 INFO : org.graylog2.bootstrap.CmdLineTool - Loaded
plugin: Collector 1.0.3 [org.graylog.plugins.collector.CollectorPlugin]
2016-07-26 18:15:43,352 INFO : org.graylog2.bootstrap.CmdLineTool - Loaded
plugin: Enterprise Integration Plugin 1.0.3
[org.graylog.plugins.enterprise_integration.EnterpriseIntegrationPlugin]
2016-07-26 18:15:43,352 INFO : org.graylog2.bootstrap.CmdLineTool - Loaded
plugin: MapWidgetPlugin 1.0.3 [org.graylog.plugins.map.MapWidgetPlugin]
2016-07-26 18:15:43,352 INFO : org.graylog2.bootstrap.CmdLineTool - Loaded
plugin: Pipeline Processor Plugin 1.0.0-beta.5
[org.graylog.plugins.pipelineprocessor.ProcessorPlugin]
2016-07-26 18:15:43,352 INFO : org.graylog2.bootstrap.CmdLineTool - Loaded
plugin: Anonymous Usage Statistics 2.0.3
[org.graylog.plugins.usagestatistics.UsageStatsPlugin]
2016-07-26 18:15:43,438 INFO : org.graylog2.bootstrap.CmdLineTool - Running
with JVM arguments: -Djava.net.preferIPv4Stack=true
2016-07-26 18:15:43,824 INFO : org.graylog2.shared.system.stats.SigarService -
Failed to load SIGAR. Falling back to JMX implementations.
2016-07-26 18:15:44,963 INFO : org.graylog2.shared.buffers.InputBufferImpl -
Message journal is enabled.
2016-07-26 18:15:45,128 INFO : kafka.log.LogManager - Loading logs.
2016-07-26 18:15:45,205 INFO : kafka.log.LogManager - Logs loading complete.
2016-07-26 18:15:45,206 INFO : org.graylog2.shared.journal.KafkaJournal -
Initialized Kafka based journal at data/journal
2016-07-26 18:15:45,221 INFO : org.graylog2.shared.buffers.InputBufferImpl -
Initialized InputBufferImpl with ring size <65536> and wait strategy
, running 2 parallel message handlers.
2016-07-26 18:15:45,270 INFO : org.mongodb.driver.cluster - Cluster created
with settings {hosts=[localhost:27017], mode=SINGLE,
requiredClusterType=UNKNOWN, serverSelectionTimeout='3 ms',
maxWaitQueueSize=5000}
2016-07-26 18:15:45,309 INFO : org.mongodb.driver.cluster - No server chosen by
ReadPreferenceServerSelector{readPreference=primary} from cluster description
ClusterDescription{type=UNKNOWN, connectionMode=SINGLE,
all=[ServerDescription{address=localhost:27017, type=UNKNOWN,
state=CONNECTING}]}. Waiting for 3 ms before timing out
2016-07-26 18:15:45,343 INFO : org.mongodb.driver.connection - Opened
connection [connectionId{localValue:1, serverValue:26}] to localhost:27017
2016-07-26 18:15:45,344 INFO : org.mongodb.driver.cluster - Monitor thread
successfully connected to server with description
ServerDescription{address=localhost:27017, type=STANDALONE, state=CONNECTED,
ok=true, version=ServerVersion{versionList=[2, 6, 10]}, minWireVersion=0,
maxWireVersion=2, maxDocumentSize=16777216, roundTripTimeNanos=427079}
2016-07-26 18:15:45,348 INFO : org.mongodb.driver.connection - Opened
connection [connectionId{localValue:2, serverValue:27}] to localhost:27017
2016-07-26 18:15:45,628 INFO : org.graylog2.plugin.system.NodeId - Node ID:
c5c29db3-bf0e-4888-8cf4-fbe5ddba0f68
2016-07-26 18:15:45,735 INFO : org.elasticsearch.node -
[graylog-c5c29db3-bf0e-4888-8cf4-fbe5ddba0f68] version[2.3.2], pid[7136],
build[b9e4a6a/2016-04-21T16:03:47Z]
2016-07-26 18:15:45,735 INFO : org.elasticsearch.node -
[graylog-c5c29db3-bf0e-4888-8cf4-fbe5ddba0f68] initializing ...
2016-07-26 18:15:45,740 INFO : org.elasticsearch.plugins -
