docker-graylog.yml

version: '3'
services:
  mongo:
    image: mongo:4.4.6  # 原镜像`mongo:4.4.6`
    container_name: mongo
    restart: unless-stopped
    hostname: mongo
    environment:
      # MONGO_INITDB_ROOT_USERNAME: admin
      # MONGO_INITDB_ROOT_PASSWORD: 123456
      MONGO_DATA_DIR: /data/db
      MONGO_LOG_DIR: /data/logs
    volumes:
      - /opt/docker/mongo/db:/data/db
      - /opt/docker/mongo/log:/data/log
    ports:
      - "27017:27017"
  # 可视化图形工具
  adminmongo:
    image: mrvautin/adminmongo
    container_name: adminmongo
    restart: unless-stopped
    hostname: adminmongo
    environment:
      - HOST=0.0.0.0
    ports:
      - "11234:1234"
    depends_on:
      - 'mongo'
  elasticsearch:
    image: elasticsearch:7.10.2
    container_name: elasticsearch             # 容器名为'elasticsearch'
    restart: unless-stopped   
    hostname: elasticsearch
    volumes:                                  # 数据卷挂载路径设置,将本机目录映射到容器目录
      - "/opt/docker/elasticsearch/data:/usr/share/elasticsearch/data"
      - "/opt/docker/elasticsearch/logs:/usr/share/elasticsearch/logs"
      # - "/opt/docker/elasticsearch/config/elasticsearch.yml:/usr/share/elasticsearch/config/elasticsearch.yml"
      # - "./elasticsearch/config/jvm.options:/usr/share/elasticsearch/config/jvm.options"
      # - "/opt/docker/elasticsearch/plugins/ik:/usr/share/elasticsearch/plugins/ik" # IK中文分词插件
    environment:
      - http.host=0.0.0.0
      - transport.host=localhost
      - network.host=0.0.0.0
      - "ES_JAVA_OPTS=-Dlog4j2.formatMsgNoLookups=true -Xms512m -Xmx512m"
      - GRAYLOG_ROOT_TIMEZONE=Asia/Shanghai
      - TZ=Asia/Shanghai
      - "LANG=en_US.UTF-8"
      - TAKE_FILE_OWNERSHIP=true  # 权限
      - "discovery.type=single-node"
      - ELASTIC_PASSWORD=123456 # elastic账号密码
    ulimits:
      memlock:
        soft: -1
        hard: -1
    deploy:
      resources:
        limits:
          memory: 1g
    ports:
      - "9200:9200"
      - "9300:9300"
  graylog:
    image: graylog/graylog:4.2
    container_name: graylog
    restart: always
    hostname: graylog
    environment:
      - GRAYLOG_PASSWORD_SECRET=somepasswordpepper
      - GRAYLOG_ROOT_PASSWORD_SHA2=8c6976e5b5410415bde908bd4dee15dfb167a9c873fc4bb8a81f6f2ab448a918
      - GRAYLOG_HTTP_EXTERNAL_URI=http://192.168.2.121:11909/ # 这里注意要改ip
      - GRAYLOG_ROOT_TIMEZONE=Asia/Shanghai
      # - GRAYLOG_MONGODB_URI=mongodb://admin:123456@mongo:27017/graylog
    entrypoint: /usr/bin/tini -- wait-for-it elasticsearch:9200 --  /docker-entrypoint.sh
    ports:
      # Graylog web interface and REST API
      - 11909:9000
      # Syslog TCP
      - 11514:1514
      # Syslog UDP
      - 11514:1514/udp
      # GELF TCP
      - 12201:12201
      # GELF UDP
      - 12201:12201/udp
    depends_on:
      - mongo
      - elasticsearch
networks:
  default:
     external:
       name: mkdtbs