Ubuntu 24.04.3 LTS系统下一键脚本安装GrayLog7.0.3最新版本

#!/bin/bash
#1、在线下载mongodb-org-server_8.2.3_amd64.deb离线包
#2、在线下载graylog-datanode_7.0.3-1_amd64.deb离线包
#3、在线下载graylog-server_7.0.3-1_amd64.deb离线包
#sudo wget https://mirrors.aliyun.com/mongodb/apt/ubuntu/dists/noble/mongodb-org/8.2/multiverse/binary-amd64/mongodb-org-server_8.2.3_amd64.deb
#sudo wget https://packages.graylog2.org/repo/debian/pool/stable/7.0/g/graylog-datanode/graylog-datanode_7.0.3-1_amd64.deb
#sudo wget https://packages.graylog2.org/repo/debian/pool/stable/7.0/g/graylog-server/graylog-server_7.0.3-1_amd64.deb
#然后打包 sudo tar -zcvf graylog7.0.3_debian_deb.tar.gz *.deb

sudo mkdir -p /opt/graylog_install
sudo tar -zxvf graylog7.0.3_debian_deb.tar.gz -C /opt/graylog_install
#设置时区为北京时区
sudo timedatectl set-timezone Asia/Shanghai
#检查时区跟时间
sudo timedatectl
#确认系统的版本 
#sudo cat /etc/os-release 

#安装MongoDB数据库并启动MongoDB服务
sudo dpkg -i /opt/graylog_install/mongodb-org-server_8.2.3_amd64.deb 
sudo systemctl daemon-reload
sudo systemctl enable mongod.service 
sudo systemctl start mongod.service 
sudo netstat  -anp | grep 27017

#安装graylog-datanode（其内置OpenSearch）
sudo dpkg -i /opt/graylog_install/graylog-datanode_7.0.3-1_amd64.deb 
#Ensure that the Linux setting vm.max_map_count is set to at least 262144
echo 'vm.max_map_count=262144' | sudo tee -a /etc/sysctl.d/99-graylog-datanode.conf
sudo sysctl --system
sudo cat /proc/sys/vm/max_map_count 
#根据官方文档openssl rand -hex 32命令随机生成password_secret
#可以自行使用sudo openssl rand -hex 32命令随机生成password_secret并在/etc/graylog/datanode/datanode.conf文件中进行替换
sudo sed -i "s/password_secret =/password_secret = 923d7af5ae3049978a19d328bea02935c2400688222e3b0f0217b6d159af5e47/g" /etc/graylog/datanode/datanode.conf

#修改graylog-datanode中opensearch日志数据存储目录到/data目录下，方便后期扩容
sudo mkdir -p /data/graylog-datanode/opensearch/data
sudo mkdir -p /data/graylog-datanode/opensearch/logs
sudo chown -R graylog-datanode:graylog-datanode /data/graylog-datanode
sudo sed -i "s|opensearch_data_location = /var/lib/graylog-datanode/opensearch/data|opensearch_data_location = /data/graylog-datanode/opensearch/data/|g" /etc/graylog/datanode/datanode.conf
sudo sed -i "s|opensearch_logs_location = /var/log/graylog-datanode/opensearch|opensearch_logs_location = /data/graylog-datanode/opensearch/logs/|g" /etc/graylog/datanode/datanode.conf
sudo systemctl daemon-reload
sudo systemctl enable graylog-datanode.service 
sudo systemctl start graylog-datanode.service 
#安装graylog-server
sudo dpkg -i /opt/graylog_install/graylog-server_7.0.3-1_amd64.deb 
#据官方文档可以自行使用echo -n "Enter Password: " && head -1 </dev/stdin | tr -d '\n' | sha256sum | cut -d" " -f1命令生成graylog Web admin登录密码
#此命令将Graylog@2026设置为graylog Web admin登录密码
sudo sed -i "s/root_password_sha2 =/root_password_sha2 = 601c209bd19bd67c60575698e1ae2e396e095a05c8e6622307db54b685e61b01/g" /etc/graylog/server/server.conf
sudo cat  /etc/graylog/server/server.conf | grep root_password_sha2
#添加password_secret值 到GraylogServer配置文件，需要与上面datanode配置文件中的password_secret 的值保持一致！！！
sudo sed -i "s/password_secret =/password_secret = 923d7af5ae3049978a19d328bea02935c2400688222e3b0f0217b6d159af5e47/g" /etc/graylog/server/server.conf 
sudo cat  /etc/graylog/server/server.conf | grep password_secret

#修改监听地址为0.0.0.0 确保能外部访问
sudo sed -i "s/#http_bind_address = 127.0.0.1:9000/http_bind_address = 0.0.0.0:9000/g" /etc/graylog/server/server.conf
sudo sed -i "s|#root_timezone = UTC|root_timezone = Asia/Shanghai|g" /etc/graylog/server/server.conf
sudo cat  /etc/graylog/server/server.conf | grep timezone
sudo sed -i "s/allow_highlighting = false/allow_highlighting = true/g" /etc/graylog/server/server.conf
sudo systemctl daemon-reload
sudo systemctl enable graylog-server.service
sudo systemctl start graylog-server.service
#请根据最后graylog-server日志文件最后显示的登录账号与密码后，在浏览器登录Graylog Web界面进行Graylog初始化
#等待10s后再查看
sudo sleep 10s 
sudo tail -f /var/log/graylog-server/server.log | grep "0.0.0.0:9000"

chmod 777 graylog7.0.3_ubuntu24.04LTS_install.sh
sudo bash graylog7.0.3_ubuntu24.04LTS_install.sh

sudo tail -f /var/log/graylog-server/server.log