setting up graylog docker swarm services

dockerfiles/graylog/docker-compose-elasticsearch.yml

@@ -0,0 +1,35 @@
+---
+# docker-compose file for graylog
+# DOCKER_HOST=dkhost03:2376 docker-compose up -d
+# DOCKER_HOST=dkhost03:2376 docker stack deploy -c docker-compose-elasticsearch.yml services
+
+version: '3'
+services:
+
+  elasticsearch:
+    image: "elasticsearch:2"
+#    image: docker.elastic.co/elasticsearch/elasticsearch:5.4.1
+    command: "elasticsearch -Des.cluster.name='es.xai-corp.net'"
+    volumes:
+      - /opt/shared/graylog/data/elasticsearch:/usr/share/elasticsearch/data
+    ports:
+#      - "9350:9350"
+#      - "9300:9300"
+      - "9200:9200"
+#      - "10091:80"
+    deploy:
+      mode: replicated
+      replicas: 1
+      restart_policy:
+        condition: any
+        delay: "1s"
+        max_attempts: 3
+      resources:
+        limits:
+          cpus: '0.5'
+          memory: 512M
+
+networks:
+  default:
+    external:
+      name: prod-private

dockerfiles/graylog/docker-compose-graylog.yml

@@ -0,0 +1,40 @@
+---
+# docker-compose file for graylog
+# DOCKER_HOST=dkhost03:2376 docker-compose up -d
+# DOCKER_HOST=dkhost03:2376 docker stack deploy -c docker-compose.yml graylog
+
+version: '3'
+services:
+
+  graylog:
+    image: graylog2/server:latest
+    volumes:
+      - /opt/shared/graylog/data/journal:/usr/share/graylog/data/journal
+      - /opt/shared/graylog/config:/usr/share/graylog/data/config
+    environment:
+      GRAYLOG_PASSWORD_SECRET: gsahu1dj901hdaiuafg3g1q
+      GRAYLOG_ROOT_PASSWORD_SHA2: d0fc133359968fbc38a267f29606c9dc805af7bcc231df9b9acd2e8e6e894ede
+      GRAYLOG_WEB_ENDPOINT_URI: http://logs.xai-corp.net:10090/api/
+      GRAYLOG_REST_LISTEN_URI: http://0.0.0.0:9000/api/
+      GRAYLOG_MONGODB_URI: mongodb://mongo/graylog
+      GRAYLOG_ELASTICSEARCH_CLUSTER_NAME: es.xai-corp.net
+    depends_on:
+      - mongo
+      - elasticsearch
+    ports:
+      - "10090:9000"
+      - "12201:12201/udp"
+      - "1514:1514/udp"
+      - "514:514/udp
+    deploy:
+      mode: replicated
+      replicas: 1
+      restart_policy:
+        condition: any
+        delay: "1s"
+        max_attempts: 3
+
+networks:
+  default:
+    external:
+      name: prod-private

dockerfiles/graylog/docker-compose-mongodb.yml

@@ -0,0 +1,34 @@
+---
+# docker-compose file for graylog
+# DOCKER_HOST=dkhost03:2376 docker-compose up -d
+# DOCKER_HOST=dkhost03:2376 docker stack deploy -c docker-compose-mongodb.yml services
+
+version: '3'
+services:
+
+  mongo:
+    image: "mongo:3"
+    volumes:
+      - /opt/shared/graylog/data/mongo:/data/db
+#    ports:
+#      - "27017:27017"
+    networks:
+      default:
+        aliases:
+          - nosql
+    deploy:
+      mode: replicated
+      replicas: 1
+      restart_policy:
+        condition: any
+        delay: "1s"
+        max_attempts: 10
+      resources:
+        limits:
+          cpus: '0.1'
+          memory: 512M
+
+networks:
+  default:
+    external:
+      name: prod-private

dockerfiles/graylog/docker-compose-test.yml

@@ -0,0 +1,26 @@
+---
+# docker-compose file for graylog
+# DOCKER_HOST=dkhost03:2376 docker-compose up -d
+# DOCKER_HOST=dkhost03:2376 docker stack deploy -c docker-compose.yml graylog
+
+version: '3'
+services:
+
+  test:
+    image: alpine
+    command: ping nosql
+    depends_on:
+      - mongo
+      - elasticsearch
+    deploy:
+      mode: replicated
+      replicas: 1
+      restart_policy:
+        condition: any
+        delay: "1s"
+        max_attempts: 3
+
+networks:
+  default:
+    external:
+      name: prod-private

dockerfiles/graylog/docker-compose.yml

@@ -0,0 +1,73 @@
+---
+# docker-compose file for graylog
+# DOCKER_HOST=dkhost03:2376 docker-compose up -d
+# DOCKER_HOST=dkhost03:2376 docker stack deploy -c docker-compose.yml graylog
+
+version: '3'
+services:
+
+  mongo:
+    image: "mongo:3"
+    volumes:
+      - /opt/shared/graylog/data/mongo:/data/db
+    ports:
+      - "27017:27017"
+    deploy:
+      mode: replicated
+      replicas: 1
+      restart_policy:
+        condition: any
+        delay: "1s"
+        max_attempts: 10
+      resources:
+        limits:
+          cpus: '0.1'
+          memory: 512M
+
+  elasticsearch:
+    image: "elasticsearch:2"
+    command: "elasticsearch -Des.cluster.name='graylog'"
+    volumes:
+      - /opt/shared/graylog/data/elasticsearch:/usr/share/elasticsearch/data
+    ports:
+      - "9350:9350"
+      - "9300:9300"
+      - "9200:9200"
+      - "10091:80"
+    deploy:
+      mode: replicated
+      replicas: 1
+      restart_policy:
+        condition: any
+        delay: "1s"
+        max_attempts: 10
+      resources:
+        limits:
+          cpus: '0.1'
+          memory: 512M
+
+  graylog:
+    image: graylog2/server:latest
+    volumes:
+      - /opt/shared/graylog/data/journal:/usr/share/graylog/data/journal
+      - /opt/shared/graylog/config:/usr/share/graylog/data/config
+    environment:
+      GRAYLOG_PASSWORD_SECRET: gsahu1dj901hdaiuafg3g1q
+      GRAYLOG_ROOT_PASSWORD_SHA2: d0fc133359968fbc38a267f29606c9dc805af7bcc231df9b9acd2e8e6e894ede
+      GRAYLOG_WEB_ENDPOINT_URI: http://logs.xai-corp.net:10090/api/
+      GRAYLOG_REST_LISTEN_URI: http://0.0.0.0:9000/api/
+      GRAYLOG_MONGODB_URI: mongodb://mongo/graylog
+    depends_on:
+      - mongo
+      - elasticsearch
+    ports:
+      - "10090:9000"
+      - "12201:12201/udp"
+      - "1514:1514/udp"
+    deploy:
+      mode: replicated
+      replicas: 1
+      restart_policy:
+        condition: any
+        delay: "1s"
+        max_attempts: 10