Graylog4.0部署腳本

所需要的包

所有的RPM包已經打包上傳，腳本和包在同級目錄下，運作腳本即可。

https://download.csdn.net/download/qq_26129413/26260066
           

elasticsearch-oss-7.10.2-x86_64.rpm
filebeat-7.15.0-x86_64.rpm
graylog-enterprise-integrations-plugins-4.0.13-1.noarch.rpm
graylog-enterprise-plugins-4.0.13-1.noarch.rpm
graylog-integrations-plugins-4.0.13-1.noarch.rpm
GraylogRPM
graylogrpm.tar
graylog-server-4.0.13-1.noarch.rpm
graylog-sidecar-1.1.0-1.x86_64.rpm
java-1.8.0-openjdk-headless-1.8.0.302.b08-0.el7_9.x86_64.rpm
mongodb-org-4.2.16-1.el7.x86_64.rpm
mongodb-org-mongos-4.2.16-1.el7.x86_64.rpm
mongodb-org-server-4.2.16-1.el7.x86_64.rpm
mongodb-org-shell-4.2.16-1.el7.x86_64.rpm
mongodb-org-tools-4.2.16-1.el7.x86_64.rpm
pwgen-2.08-1.el7.x86_64.rpm
           

腳本内容

#!/bin/bash
## 2021-9-30

### 安裝rpm ###
install-rpm(){
mkdir -p /root/GraylogRPM
tar -xvf graylogrpm.tar  -C /root/GraylogRPM
cd GraylogRPM
yum  -y  install *.rpm
}
### 修改elasticsearch 配置 ###
es(){
tee -a /etc/elasticsearch/elasticsearch.yml > /dev/null <<EOT
cluster.name: graylog
action.auto_create_index: false
EOT
}
### 修改Graylog 配置 ###
Gylog(){
cp /etc/graylog/server/server.conf /etc/graylog/server/server.conf.bak
password_secret=$(pwgen -N 1 -s 96)

read -p "GraylogPasswd:   " pswd
    while [ -z "${pswd}" ]
    do
        read -p "  Grayogpasswd :    " pswd
    done
    pdd=$(echo -n ${pswd} | sha256sum)  ##生成登陸密碼
    passdd=$(echo $pdd | awk '{print $1}')
sed -i 's/#root_timezone = UTC/root_timezone = Asia\/Shanghai/g' /etc/graylog/server/server.conf
sed -i 's/allow_highlighting = false/allow_highlighting = true/g' /etc/graylog/server/server.conf
sed -i 's/#http_bind_address = 127.0.0.1:9000/http_bind_address = 0.0.0.0:9000/g' /etc/graylog/server/server.conf
sed -i 's/password_secret =/password_secret = '$password_secret'/g' /etc/graylog/server/server.conf
sed -i 'root_password_sha2 =/root_password_sha2 = '${passdd}'/g' /etc/graylog/server/server.conf
}
### 啟動應用 ###
staart(){
systemctl daemon-reload
systemctl start  mongod.service  elasticsearch.service  graylog-server.service  &&   systemctl enable  mongod.service  elasticsearch.service  graylog-server.service
 }
install-rpm 
es 
Gylog 
staart