Official Docs: Deb Package or Debian Direct
Make sure to have the following software installed and configured before installing Graylog
Add the Graylog repo
apt install apt-transport-https
wget https://packages.graylog2.org/repo/packages/graylog-5.0-repository_latest.deb
dpkg -i graylog-5.0-repository_latest.debUpdate and Install
apt update
apt install graylog-serverEnable and start (The server may not start due to missing configuration. If it does, it won't function properly)
systemctl enable graylog-server.service
systemctl start graylog-server.service
systemctl status graylog-server.serviceOpen the Graylog server config file at /etc/graylog/server/server.conf
Read the directions in the config file for how to fill out the following parameters.
Set password_secret
password_secret = **********************************************************************Set root_password_sha2
root_password_sha2 = If you see the “Nodes with too long GC pauses” error message, you likely need to increase the memory allocated to the Java process.
Config options are located in /etc/default/graylog-server
Increase the value of Xms and Xmx
GRAYLOG_SERVER_JAVA_OPTS="-Xms1g -Xmx2g -server -XX:+UseG1GC -XX:-OmitStackTraceInFastThrow"Restart Graylog
check which indices are available and in use with:
curl http://127.0.0.1:9200/_cat/indicesDelete a specific indice
curl -XDELETE http://127.0.0.1:9200/graylog_1