fix elasticsearch by creating a distributed glusterfs filesystem for elasticsearch data

update graylog

dockerfiles/graylog/docker-compose.yml

@@ -6,46 +6,6 @@
 version: '3'
 services:
 
-  mongo:
-    image: "mongo:3"
-    volumes:
-      - /opt/shared/graylog/data/mongo:/data/db
-    ports:
-      - "27017:27017"
-    deploy:
-      mode: replicated
-      replicas: 1
-      restart_policy:
-        condition: any
-        delay: "1s"
-        max_attempts: 10
-      resources:
-        limits:
-          cpus: '0.1'
-          memory: 512M
-
-  elasticsearch:
-    image: "elasticsearch:2"
-    command: "elasticsearch -Des.cluster.name='graylog'"
-    volumes:
-      - /opt/shared/graylog/data/elasticsearch:/usr/share/elasticsearch/data
-    ports:
-      - "9350:9350"
-      - "9300:9300"
-      - "9200:9200"
-      - "10091:80"
-    deploy:
-      mode: replicated
-      replicas: 1
-      restart_policy:
-        condition: any
-        delay: "1s"
-        max_attempts: 10
-      resources:
-        limits:
-          cpus: '0.1'
-          memory: 512M
-
   graylog:
     image: graylog2/server:latest
     volumes:
@@ -54,9 +14,10 @@ services:
     environment:
       GRAYLOG_PASSWORD_SECRET: gsahu1dj901hdaiuafg3g1q
       GRAYLOG_ROOT_PASSWORD_SHA2: d0fc133359968fbc38a267f29606c9dc805af7bcc231df9b9acd2e8e6e894ede
-      GRAYLOG_WEB_ENDPOINT_URI: http://logs.xai-corp.net:10090/api/
+      GRAYLOG_WEB_ENDPOINT_URI: https://logs.xai-corp.net/api/
       GRAYLOG_REST_LISTEN_URI: http://0.0.0.0:9000/api/
       GRAYLOG_MONGODB_URI: mongodb://mongo/graylog
+      GRAYLOG_ELASTICSEARCH_CLUSTER_NAME: es.xai-corp.net
     depends_on:
       - mongo
       - elasticsearch
@@ -64,10 +25,16 @@ services:
       - "10090:9000"
       - "12201:12201/udp"
       - "1514:1514/udp"
+      - "514:514/udp"
     deploy:
       mode: replicated
       replicas: 1
       restart_policy:
         condition: any
         delay: "1s"
-        max_attempts: 10
+        max_attempts: 3
+
+networks:
+  default:
+    external:
+      name: prod-private