Install Graylog

In this section of the documentation, we walk you through how to install Graylog on supported operating systems and services, ensuring you find the approach that best fits your environment.

There are two primary deployment methods for installing Graylog: directly on a Linux-based system or in a containerized environment with Docker Compose.

Direct Deployment

Graylog supports deployment on Linux servers through operating system packages, either via Debian or RPM. For information on supported operating systems and provided installation packages, see Direct Deployment.

Hint: It is also possible to manually install Graylog on Linux servers by downloading the tar archive from the download pages and extracting it on your system; however, this method is not generally recommended.

Installation Guides

Step-by-step instructions for installing Graylog via direct deployment may be found for each of the supported Linux-based operating systems depending on the scale of the clustered environment you intend to build. Read more about the recommended system models in Graylog System Architecture.

For installation guides on small-scale clusters with a single Graylog node, see the following:

For installation guides on medium to large clusters with multiple Graylog nodes, see the following:

For those intending to build larger or more complex environments, see the guidance on custom builds.

Configuration Management and Automation Tools

Configuration management and orchestration tools can be used for automating Graylog infrastructure deployment, configuration, and management across multiple servers. They help system administrators and DevOps teams manage infrastructure as code (IaC) to ensure consistency, scalability, and efficiency. We recommend reviewing the documentation for Chef, Puppet or Ansible if you are considering this method of deployment.

Containerized Deployment

Graylog can be run in a containerized environment utilizing Docker Compose. If this is your preferred method of installation, we recommend you begin by reading Containerized Deployment to familiarize yourself with the Compose file necessary to deploy Graylog in a Docker container. We have also provided step-by-step instructions for running Graylog in Docker once you are ready to begin set up.

Graylog with Self-Managed OpenSearch

Warning: It is possible to deploy Graylog with self-managed OpenSearch; however, Data Node is the recommended search backend for use with Graylog.

General guidance on deploying Graylog with OpenSearch may be found in the following documentation: