Graylog-web 1.3 port change

graylog

I've just setup graylog server on my ubuntu server using the the apt-get feature. Graylog is currently working with no issues, but I would like to change the port from 9000 to port 80/443. I can't seem to find any documentation on how to do that!

Best Answer

Running applications on ports lower than 1024 in Linux requires root or other types of escalated privileges. Since Java runs in a VM, it will not be able to SUID easily after starting as root.

The recommended way is to leave it run on the current port, on localhost, and put a reverse proxy in front of it (such as nginx or - easier, haproxy).

Related Solutions

How to forward arbitrary files to graylog2 with rsyslog

Try this LEGACY rsyslog formatted version:

# Forward apache logs to graylog2 server
$ModLoad imfile # needs to be done just once

$InputFileName /var/log/httpd/access.log
$InputFileTag ApacheAccessLog:
$InputFileStateFile access.log.statefile
$InputFileFacility local4
$InputFileSeverity info
$InputRunFileMonitor

$InputFileName /var/log/httpd/error.log
$InputFileTag ApacheErrorLog:
$InputFileStateFile error.log.statefile
$InputFileFacility local4
$InputFileSeverity error
$InputRunFileMonitor

local4.*                        @@log.ospreyreach.com:12514
& stop

You can do similar entries for your other log files.

After that, create some extractors on your graylog2 server for the 12514/TCP input. This will give you some fine grain options for graphs etc.

Installing Graylog2 with puppet

You need to use elastic search version elasticsearch-0.90.10 they say it is compatible with elasticsearch-1.3.2 in the changelog but I had the same error as you using the newer elasticsearch

Best Answer

Related Solutions

How to forward arbitrary files to graylog2 with rsyslog

Installing Graylog2 with puppet

Related Topic