Quickly deploy Graylog 2.x in Rancher 1.6x

This docker-compose.yml file is aimed to quickly deploy Graylog instance in development environment.

Features

• Use Rancher metadata to correctly bind rest_transport_uri to Rancher host IP.
• Download and install Graylog plugins from GitHub.
• Download MaxMind GeoLite2 database and update it on a schedule.
• Disable Graylog's built-in telemetry plugin.

Batteries included

• graylog2/server
• mongo + mongo-express
• elasticsearch 2 + kopf
• geoipupdate

Configuration

Graylogs's startup script is used to execute custom startup code, which can be configured via environment variables.

• Port to bind rest_transport_uri to.

REST_TRANSPORT_URI_PORT: '9000'

• Disable Graylog built-in telemetry plugin.

DISABLE_TELEMETRY: '1'

• Plugins to download from GitHub. Use username/repo-name format. Separate entries by whitespace (space, tab, newline, etc...).

PLUGINS: |-
  graylog-labs/graylog-plugin-slack
  cvtienhoven/graylog-plugin-aggregates

See docs for graylog2/server image to configure Graylog-specific environment variables.

Enabling access to KOPF & Mongo Express

KOPF and Mongo Express ports are not exposed by default, since both these services are running without authentication. To enable access, uncomment relevant ports in docker-compose.yml (see comments in file). Note that you should do this only if running locally or in secure enviornment. Never expose those services to the outside world without configuring authentication and encryption.

Usage

rancher-compose

1. Open shell
2. Navigate to rancher-graylog/graylog folder: cd /path/to/rancher-graylog/graylog
3. Create stack: rancher-compose create

Rancher UI

• STACKS -> Add stack -> Optional: docker-compose.yml