Default file locations

Each installation flavor of Graylog will place the configuration files into a specific location on the local files system. The goal of this section is to provide a short overview about the most common and most important default file locations.

DEB package

This paragraph covers Graylog installations on Ubuntu Linux, Debian Linux, and Debian derivates installed with the DEB package.

Graylog

  File system path
Configuration /etc/graylog/server/server.conf
Logging configuration /etc/graylog/server/log4j2.xml
Plugins /usr/share/graylog-server/plugin
JVM settings /etc/default/graylog-server
Message journal files /var/lib/graylog-server/journal
Log Files /var/log/graylog-server/

Elasticsearch

Note

These are only the most common file locations. Please refer to the Elasticsearch documentation for a comprehensive list of default file locations.

  File system path
Configuration /etc/elasticsearch
JVM settings /etc/default/elasticsearch
Data files /var/lib/elasticsearch/data
Log files /var/log/elasticsearch/

MongoDB

  File system path
Configuration /etc/mongod.conf
Data files /var/lib/mongodb/
Log files /var/log/mongodb/

RPM package

This paragraph covers Graylog installations on Fedora Linux, Red Hat Enterprise Linux, CentOS Linux, and other Red Hat Linux derivates installed with the RPM package.

Graylog

  File system path
Configuration /etc/graylog/server/server.conf
Logging configuration /etc/graylog/server/log4j2.xml
Plugins /usr/share/graylog-server/plugin
JVM settings /etc/sysconfig/graylog-server
Message journal files /var/lib/graylog-server/journal
Log Files /var/log/graylog-server/

Elasticsearch

Note

These are only the most common file locations. Please refer to the Elasticsearch documentation for a comprehensive list of default file locations.

  File system path
Configuration /etc/elasticsearch
JVM settings /etc/sysconfig/elasticsearch
Data files /var/lib/elasticsearch/
Log files /var/log/elasticsearch/

MongoDB

  File system path
Configuration /etc/mongod.conf
Data files /var/lib/mongodb/
Log files /var/log/mongodb/

Omnibus package

This paragraph covers Graylog installations via OVA, on AWS (via AMI), and on Openstack using the Graylog Omnibus package.

Graylog

  File system path
Configuration /opt/graylog/conf/graylog.conf
Logging configuration /opt/graylog/conf/log4j2.xml
Plugins /opt/graylog/plugin
JVM settings /etc/graylog/graylog-settings.json
Message journal files /var/opt/graylog/data/journal
Log files /var/log/graylog/server/

Elasticsearch

Note

These are only the most common file locations. Please refer to the Elasticsearch documentation for a comprehensive list of default file locations.

  File system path
Configuration /opt/graylog/conf/elasticsearch/
JVM settings /etc/graylog/graylog-settings.json
Data files /var/opt/graylog/data/elasticsearch
Log files /var/log/graylog/elasticsearch/

MongoDB

  File system path
Configuration /etc/graylog/graylog-settings.json
Data files /var/opt/graylog/data/mongodb
Log files /var/log/graylog/mongodb/