{"id":2257,"date":"2024-11-28T10:53:58","date_gmt":"2023-08-20T01:43:49","guid":{"rendered":""},"modified":"2025-02-02T00:46:18","modified_gmt":"2025-02-01T23:46:18","slug":"how-to-install-graylog-centralized-log-management-system-on-rocky-linux","status":"publish","type":"post","link":"https:\/\/netcloud24.com\/knowledgebase\/how-to-install-graylog-centralized-log-management-system-on-rocky-linux\/","title":{"rendered":"Linux VPS & VPS Windows Setup Guide | NetCloud24 Graylog Centralized Log Management System on Rocky Linux"},"content":{"rendered":"

\u00a0<\/p>\n<\/p>\n

\n

\u00a0<\/h1>\n<\/header>\n
\n

Graylog is a powerful centralized log management system that allows you to collect, index, and analyze log data from various sources. This guide will walk you through the installation of Graylog on Rocky Linux. Whether you are deploying it on a local server or using a , this tutorial will cover all the necessary steps.<\/p>\n

\n

Step 1: Update Your System<\/h2>\n

Before installing Graylog, ensure that your system is up to date. Run the following commands:<\/p>\n

sudo dnf update -y<\/code><\/pre>\n
Keeping your system updated is crucial for security and performance, whether you’re setting it up locally or on a VPS Windows VPS Servers<\/a> platform.<\/p>\n<\/section>\n
\n
Step 2: Install Java<\/h2>\n
Graylog requires Java to run. Install OpenJDK 11 using the following command:<\/p>\n
sudo dnf install java-11-openjdk -y<\/code><\/pre>\n
After installation, verify the Java installation:<\/p>\n
java -version<\/code><\/pre>\n<\/section>\n
\n
Step 3: Install MongoDB<\/h2>\n
Graylog uses MongoDB as its database. To install MongoDB, follow these steps:<\/p>\n
\r\nsudo nano \/etc\/yum.repos.d\/mongodb-org-5.0.repo\r\n            <\/code><\/pre>\n
Add the following content to the file:<\/p>\n
\r\n[mongodb-org-5.0]\r\nname=MongoDB Repository\r\nbaseurl=https:\/\/repo.mongodb.org\/yum\/redhat\/8\/mongodb-org\/5.0\/x86_64\/\r\ngpgcheck=1\r\nenabled=1\r\ngpgkey=https:\/\/www.mongodb.org\/static\/pgp\/server-5.0.asc\r\n            <\/code><\/pre>\n
After saving the file, install MongoDB:<\/p>\n
sudo dnf install mongodb-org -y<\/code><\/pre>\n
Start and enable the MongoDB service:<\/p>\n
\r\nsudo systemctl start mongod\r\nsudo systemctl enable mongod\r\n            <\/code><\/pre>\n<\/section>\n
\n
Step 4: Install Elasticsearch<\/h2>\n
Graylog uses Elasticsearch for storing and indexing log data. To install Elasticsearch, follow these steps:<\/p>\n
\r\nsudo rpm --import https:\/\/artifacts.elastic.co\/GPG-KEY-elasticsearch\r\nsudo tee \/etc\/yum.repos.d\/elasticsearch.repo <<\/code><\/pre>\n
After adding the repository, install Elasticsearch:<\/p>\n
sudo dnf install elasticsearch -y<\/code><\/pre>\n
Start and enable the Elasticsearch service:<\/p>\n
\r\nsudo systemctl start elasticsearch\r\nsudo systemctl enable elasticsearch\r\n            <\/code><\/pre>\n<\/section>\n
\n
Step 5: Install Graylog<\/h2>\n
Now, you can install Graylog. First, download the latest Graylog package:<\/p>\n
\r\nwget https:\/\/downloads.graylog.org\/repo\/packages\/graylog-4.3.8.tgz\r\ntar -xvzf graylog-4.3.8.tgz\r\nsudo mv graylog-4.3.8 \/usr\/share\/graylog\r\n            <\/code><\/pre>\n
Now, create a configuration file for Graylog:<\/p>\n
sudo nano \/usr\/share\/graylog\/graylog.conf<\/code><\/pre>\n
Add the following configuration (update password_secret<\/code> with a secure random string):<\/p>\n
\r\npassword_secret = your_password_secret\r\nroot_password_sha2 = your_root_password_hash\r\nhttp_bind_address = 0.0.0.0:9000\r\nhttp_enable = true\r\nelasticsearch_shards = 4\r\nelasticsearch_replicas = 0\r\n            <\/code><\/pre>\n
Replace your_password_secret<\/code> with a generated secure string and your_root_password_hash<\/code> with the SHA-256 hash of your desired root password.<\/p>\n<\/section>\n
\n
Step 6: Start Graylog<\/h2>\n
To start Graylog, run the following command:<\/p>\n
\r\nsudo graylog-ctl run\r\n            <\/code><\/pre>\n<\/section>\n
\n
Step 7: Access Graylog Web Interface<\/h2>\n
Open your web browser and navigate to:<\/p>\n
http:\/\/your-server-ip:9000<\/code><\/pre>\n
Log in with the root username and password you set earlier.<\/p>\n<\/section>\n