1. 需要先安装部署 MongoDB

1.1 先配置yum源

vim  /etc/yum.repos.d/mongodb-org.repo
[mongodb-org-6.0]
name=MongoDB Repository
baseurl=https://repo.mongodb.org/yum/redhat/$releasever/mongodb-org/6.0/x86_64/
gpgcheck=1
enabled=1
gpgkey=https://www.mongodb.org/static/pgp/server-6.0.asc

1.2 安装 MongoDB

sudo yum install -y mongodb-org

1.3 启动 MongoDB 并配置开机自启

sudo systemctl daemon-reload
sudo systemctl enable mongod
sudo systemctl start mongod
sudo systemctl status mongod

2. 安装 Elasticsearch

2.1 下载 rpm包,并安装

wget   https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-7.10.2-x86_64.rpm
#安装elasticsearch
rpm -ivh  elasticsearch-7.10.2-x86_64.rpm

2.2 创建ES使用的数据目录和日志目录

mkdir -p /data/es/data /data/es/logs
chown -R elasticsearch:elasticsearch   /data/es

2.3 修改ES的配置文件

vim /etc/elasticsearch/elasticsearch.yml
cluster.name: graylog  #集群名称
path.data: /data/es/data
path.logs: /data/es/logs

2.4 启动ES

systemctl daemon-reload
systemctl enable elasticsearch.service
systemctl start elasticsearch.service
systemctl status  elasticsearch.service

3. 安装部署 Graylog

3.1 下载rpm包并安装

wget https://packages.graylog2.org/repo/el/stable/5.0/x86_64/graylog-server-5.0.12-1.x86_64.rpm
rpm -ivh graylog-server-5.0.12-1.x86_64.rpm

3.2 生成密码字符串

< /dev/urandom tr -dc A-Z-a-z-0-9 | head -c${1:-96};echo;

echo -n "Enter Password: " && head -1 </dev/stdin | tr -d '\n' | sha256sum | cut -d" " -f1

输入这个命令后需要输入密码，后续登录会用上

3.3 修改配置文件

vim /etc/graylog/server/server.conf
password_secret = CKDr9HheluURLBiju2VpWQ4rNRFc4Y8MjLi994oUPiHVHyF5clN3zr-qRiR-vSkSP9sX1Y2FqmL9OCdSM5wCTx6KW9AJ-kta #前面生成的
root_password_sha2 = 91b4d142823f7d20c5f08df69122de43f35f057a988d9619f6d3138485c9a203  #前面生成的
root_timezone = Asia/Shanghai # 时区
http_bind_address = 10.206.0.4:9000   #本机地址
http_publish_uri = http://10.206.0.4:9000/graylog/   #访问url带目录

#es集群
elasticsearch_hosts = http://127.0.0.1:9200

#MongoDB集群
mongodb_uri = mongodb://127.0.0.1:27017/graylog?replcaSet=graylog

3.4 启动Graylog

systemctl enable graylog-server.service 
systemctl start graylog-server.service 
systemctl status graylog-server.service

4. 测试访问

用户名默认是admin，密码是上面字符串生成的密码

登录成功