I have manged to install Graylog2 from scratch by downloading all the DEB files and making the configurations. Now I try to install Graylog2 with the help of puppet in an environment and had no luck so far.
I am using elasticsearch/elasticsearch and graylog/graylog from the forge.
This is my configuration so far:
#site.pp node 'mynode' { class {'apt': proxy_host => 'proxynode', proxy_port => '3142', } class {'toolbox':} class {'java':} class {'elasticsearch': ensure => 'present', #enabled => ensure running + enabled true status => 'enabled', ###only works with the repository #version => '1.3.2', package_url => 'puppet:///files/deb/elasticsearch-0.90.13.deb', } elasticsearch::instance {'graylog2':} class {'mongodb':} class {'graylog2::repo': version => '0.21', } -> class {'graylog2::server': service_enable => 'true', rest_listen_uri => "http://${::ipaddress}:12900", rest_transport_uri => "http://${::ipaddress}:12900", #verysecurepw password_secret => 'cdebc192e0ae1f5df753018a8d284b9eacf2042d55fb712f7a89260c3fc3668d', root_password_sha2 => 'cdebc192e0ae1f5df753018a8d284b9eacf2042d55fb712f7a89260c3fc3668d', } -> class {'graylog2::web': application_secret => 'cdebc192e0ae1f5df753018a8d284b9eacf2042d55fb712f7a89260c3fc3668d', graylog2_server_uris => ["http://${::ipaddress}:12900"], } } The deb packages are downloaded successfully and installed as well. When I use a custom elasticsearch instance it starts up automatically, if I don't the instance does not start.
However if I try to start graylog-server it gives me the following:
ERROR: Could not successfully connect to ElasticSearch. Check that your cluster state is not RED and that ElasticSearch is running properly. Checking the Elasticsearch service:
curl -XGET 'http://192.168.0.1:9200/_cluster/health?pretty=true' { "cluster_name" : "elasticsearch", "status" : "green", "timed_out" : false, "number_of_nodes" : 2, "number_of_data_nodes" : 2, "active_primary_shards" : 0, "active_shards" : 0, "relocating_shards" : 0, "initializing_shards" : 0, "unassigned_shards" : 0 } Looks OK
Looking on the Webpage 192.168.0.1:9000 gives me an error that graylog-web service can't connect to the server.
Maybe I am missing a connection between graylog and Elasticsearch, but I can't seem to find it.
The Graylog Error Log:
2014-09-09T12:02:54.383+02:00 ERROR [ServiceManager] Service IndexerSetupService [FAILED] has failed in the STARTING state. java.lang.IllegalStateException at org.graylog2.UI.exitHardWithWall(UI.java:40) at org.graylog2.indexer.Indexer.start(Indexer.java:205) at org.graylog2.initializers.IndexerSetupService.startUp(IndexerSetupService.java:66) at com.google.common.util.concurrent.AbstractIdleService$2$1.run(AbstractIdleService.java:54) at com.google.common.util.concurrent.Callables$3.run(Callables.java:95) at java.lang.Thread.run(Thread.java:745) 2014-09-09T12:02:54.394+02:00 ERROR [InputSetupService] Not starting any inputs because lifecycle is: Uninitialized?[LB:DEAD] 2014-09-09T12:02:54.404+02:00 INFO [PeriodicalsService] Shutting down periodical [org.graylog2.periodical.DeflectorManagerThread]. 2014-09-09T12:02:54.404+02:00 INFO [PeriodicalsService] Shutdown of periodical [org.graylog2.periodical.DeflectorManagerThread] complete, took <0ms>. ---snip---
