graylog/graylog-datanode repository overview

⁠Graylog Data Node Docker Image

The latest stable version of Graylog Data Node is 7.1.3.

⁠What is Graylog Data Node?

Graylog is a centralized logging solution that enables aggregating and searching through logs. The Data Node is a management component for OpenSearch to configure and adapt it for use with Graylog. It ensures that the data layer for Graylog is properly secured with certificates and provides cluster membership handling and adoption of new nodes for use with Graylog. The Data Node will make sure the appropriate OpenSearch version and necessary extensions are in place so that Graylog can function as intended.

⁠Image Details

There are images for the linux/amd64 and linux/arm64 platforms available. All images are based on the latest Eclipse Temurin image⁠ (JRE + Ubuntu LTS variant) available at build time.

⁠graylog/graylog-datanode

⁠Configuration

Please refer to the Graylog Docker documentation⁠ for a comprehensive overview and detailed description of the Graylog Docker image.

If you want to quickly spin up an instance for testing, you can use our Docker Compose template⁠.

Notably, this image requires that one important configuration option is set (although in practice, you will likely need to set more):

1. password_secret (environment variable GRAYLOG_DATANODE_PASSWORD_SECRET)
   • A shared common secret with Graylog. Please refer to the Graylog docs on how to create it (and then copy it over)

Every Graylog DataNode configuration option⁠ can be set via an environment variable. To get the environment variable name for a given configuration option, simply prefix the option name with GRAYLOG_DATANODE_ and put it all in upper case. Another option is to store the configuration file outside of the container and edit it directly.

⁠Docker Compose Example

---
services:
  graylog-datanode:
#    hostname: "datanode"
    image: "graylog/graylog-datanode:7.1"
    depends_on:
      - "mongodb"
    environment:
      GRAYLOG_DATANODE_PASSWORD_SECRET: "<password-secret>"
      GRAYLOG_DATANODE_ROOT_USERNAME: "<admin user name>"
      GRAYLOG_DATANODE_MONGODB_URI: "mongodb://mongodb:27017/graylog"
    ulimits:
      memlock:
        hard: -1
        soft: -1
      nofile:
        soft: 65536
        hard: 65536
    ports:
      - "127.0.0.1:8999:8999"  # Graylog Data Node REST API
      - "127.0.0.1:9200:9200"  # OpenSearch REST API
      - "127.0.0.1:9300:9300"  # OpenSearch Transport API
    volumes:
      - "graylog-datanode:/var/lib/graylog-datanode"

  mongodb:
    image: "mongo:5.0"
    ports:
      - "127.0.0.1:27017:27017"
    volumes:
      - "mongodb:/data/db"

volumes:
  graylog-datanode:
  mongodb:

Enable hostname: "datanode" in docker-compose.yml and datanode as an alias for your IPv4/IPv6 addresses for localhost, if you want to only run it as above and connect from within a running Graylog in IntelliJ during develpoment.

⁠Environment Variables

⁠Documentation

Documentation for Graylog is hosted here⁠. Please review the docs and familiarize yourself with the functionality before opening an issue on GitHub⁠.

⁠License

Graylog itself is licensed under the Server Side Public License (SSPL), see license information⁠.

This Docker image is licensed under the Apache 2.0 license, see LICENSE⁠.