Graylog SIEM (SOC Level 2 of 3)

Get Graylog

• git clone https://github.com/Graylog2/docker-compose.git

Config

• cd docker-compose/cluster
  #set your_new_password
  #get your_new_password_sha from : echo -n your_new_password | shasum -a 256
• sudo nano .env.example
  keyin your_new_password and your_new_password_sha
• sudo mv .env.example .env

Run

• sudo docker-compose up -d
• sudo ufw open ports 9000,1514~1516(tcp/udp),12201(tcp/udp)
• http://yourip:9000/welcome