Each installation flavor of Graylog will place configuration files into a specific location on the local files system. The goal of this section is to provide a short overview about the most common and most important default file locations.

DEB Package

This paragraph covers Graylog installations on Ubuntu Linux, Debian Linux, and Debian derivatives installed with the DEB package.

Graylog

 

File System Path

Configuration

/etc/graylog/server/server.conf

Logging configuration

/etc/graylog/server/log4j2.xml

Plugins

/usr/share/graylog-server/plugin

Binaries

/usr/share/graylog-server/bin

Scripts

/usr/share/graylog-server/scripts

JVM settings

/etc/default/graylog-server

Message journal files

/var/lib/graylog-server/journal

Log Files

/var/log/graylog-server/

OpenSearch

 

File System Path

Configuration

/etc/opensearch

JVM settings

/etc/sysconfig/opensearch

Data files

/var/lib/opensearch/data

Log files

/var/log/opensearch/

MongoDB

 

File System Path

Configuration

/etc/mongod.conf

Data files

/var/lib/mongodb/

Log files

/var/log/mongodb/

RPM Package

This covers Graylog installations on Fedora Linux, Red Hat Enterprise Linux, CentOS Linux, and other Red Hat Linux derivatives installed within the RPM package.

Graylog

 

File System Path

Configuration

/etc/graylog/server/server.conf

Logging configuration

/etc/graylog/server/log4j2.xml

Plugins

/usr/share/graylog-server/plugin

Binaries

/usr/share/graylog-server/bin

Scripts

/usr/share/graylog-server/scripts

JVM settings

/etc/sysconfig/graylog-server

Message journal files

/var/lib/graylog-server/journal

Log Files

/var/log/graylog-server/

OpenSearch

 

File System Path

Configuration

/etc/opensearch

JVM settings

/etc/sysconfig/opensearch

Data files

/var/lib/opensearch/

Log files

/var/log/opensearch/

MongoDB

 

File System Path

Configuration

/etc/mongod.conf

Data files

/var/lib/mongodb/

Log files

/var/log/mongodb/

Default Files for Forwarder Installation (RPM and DEB)

 

File System Path

Configuration

/etc/graylog/forwarder/forwarder.conf

Message journal files

/var/lib/graylog-forwarder/data

JVM settings

/etc/graylog/forwarder/jvm.options

Logging settings

/etc/graylog/forwarder/log4j2.xml

Log files /var/log/graylog-forwarder/forwarder.log

For more information please refer to the Forwarder.