Graylog install assistance

[da_da]

Would someone point me to an install process in installing graylog so that the data collected is not kept on the iocage, but rather the NAS storage, please.

 

[sretalla]

The plugin for Graylog uses mongodb.

If you stop the jail and have a look at /mnt/<jailpool>/iocage/jails/graylog/root/var/db/mongodb you should see the files used to store the data.

If you copy those (and apply the same permissions) to another location on the NAS and then delete that path from the jail, then use Mount Points to put the directory back into the jail from the location you chose.

Start the jail and confirm it's working as expected.

 

[da_da]

Thank you. Last I tried, it seemed that mnDb cameup OK, but the issue was elastisearch Db that would not work. Also, when I attempted to create ACL's to make it work mongo was continuing to change them, it looks like a major overhaul and not sure if this would work.

 

[da_da]

When modifying the /usr/local/etc/elasticsearch/elasticsearch.yml file path directory elasticsearch does not start.

OK, so I stopped the services, then copied the folders( elasticsearch, mongodb, graylog) with permission (cp -rp) from the var/db and var/log to the NAS. then deleted the folders from the /var/db. I, then went ahead and stopped the jail. mapped the folders in the mount points for var/db and var/log. restarted the jail. Now and still elasticsearch would not start.

what am I missing?

 

[sretalla]

You're right, there's also elastic to take into account... similar recommendation... stop jail, copy content from /var/db/elasticsearch and /usr/local/etc/elasticsearch (making matching permissions on the copies), mount to the jail in the original paths and start jail.

 

[da_da]

as I stated earlier it does not work, why?

do I need to move the entire var to the NAS?

 

[da_da]

Do I need to create specific ACL for the NAS?

 

[xames]

This graylog plugin has the latest graylog server update?