Graylog2 Puppet install notes

Assuming Ubuntu 14.04 “Trusty” as the OS here… this should probably work on Debian 8 with just a change on the Mongo repo.

First, install puppet if you haven’t already.
sudo apt-get update && sudo apt-get install -y puppet

Next, add ES and Mongo official packages to the repo. Graylog generally requires newer versions of ES than are in the mainline Debian or Ubuntu repos.

wget -qO - https://packages.elastic.co/GPG-KEY-elasticsearch | sudo apt-key add -

echo "deb http://packages.elastic.co/elasticsearch/1.6/debian stable main" | sudo tee -a /etc/apt/sources.list

sudo apt-key adv --keyserver hkp://keyserver.ubuntu.com:80 --recv 7F0CEB10

echo "deb http://repo.mongodb.org/apt/ubuntu "$(lsb_release -sc)"/mongodb-org/3.0 multiverse" | sudo tee /etc/apt/sources.list.d/mongodb-org-3.0.list

apt-get update

Use this quick manifest:

Then:
puppet apply graylog.pp

Note that this doesn’t seem to install the graylog-ctl binary for some reason. Use systemd to start/stop/restart (graylog-server and graylog-web are the two you’re probably looking for). Remember that by default, Graylog will use port 9000 for the web interface.