Install Graylog

In this section, we walk you through how to install Graylog on supported operating systems and services, ensuring you find the approach that best fits your environment.

Choose an Installation Method

The following step-by-step guides cover installation methods for the systems and services supported by Graylog:

System Requirements

The Graylog server application is compatible with the following operating systems:

  • Debian 10, 11, and 12

  • Ubuntu 20.04 and 22.04

  • Red Hat Enterprise Linux 7-9 and compatible (AlmaLinux, Rocky Linux, etc.)

  • SUSE Linux Enterprise Server 12, 15

Also required is:

Compatibility Matrix

Please verify the version compatibility of your Graylog version with its dependent software requirements: 

Graylog Version Minimum MongoDB Version Maximum MongoDB Version Minimum OpenSearch Version Maximum OpenSearch Version
4.0.x 3.6 4.2 Not Supported Not Supported
4.1.x 3.6 4.4 Not Supported Not Supported
4.2.x 3.6 4.4 Not Supported Not Supported
4.3.x 3.6 5.0 1.1.x (or 1.3.x for Graylog Security) 1.3.x

5.0.x

5.0.7

6.x

1.1.x (or 1.3.x for Graylog Security)

2.13.x

5.1.x

5.0.7

6.x

1.1.x (or 1.3.x for Graylog Security)

2.13.x

5.2.x

5.0.7

6.x

1.1.x (or 1.3.x for Graylog Security)

2.13.x

6.0.x

5.0.7

7.x

1.1.x (or 1.3.x for Graylog Security)

2.15.x

6.1.x

5.0.7

7.x

1.1.x (or 1.3.x for Graylog Security)

2.15.x

Installation with Self-Managed OpenSearch

Hint: We strongly recommend that you install and deploy Graylog with Data Node, the data management component that enhances the security of your data layer by implementing certificates, managing cluster membership, and facilitating the addition of new search backend nodes. See the previous section for installation guides that detail how to install and set up Graylog with Data Node. However, if you prefer to manage your search backend directly, then follow the installation guides in this section.

The following step-by-step guides will walk you through the process of installation on systems and services supported by Graylog with a self-managed OpenSearch instance as your search backend: