Dustin C. Hatch
3aad9c1dda
The *graylog* role installs Graylog from the *graylog2.org* Yum repository and manages basic server configuration. It augments the default systemd unit to provide the `CAP_NET_BIND_SERVICE` capability to the Graylog server process via ambient capabilities, thereby allowing the server to bind to the privileged Syslog UDP port.
13 lines
655 B
Django/Jinja
13 lines
655 B
Django/Jinja
# Path to the java executable.
|
|
JAVA=/usr/bin/java
|
|
|
|
# Default Java options for heap and garbage collection.
|
|
GRAYLOG_SERVER_JAVA_OPTS="-Xms{{ graylog_memory }} -Xmx{{graylog_memory }} -XX:NewRatio=1 -server -XX:+ResizeTLAB -XX:+UseConcMarkSweepGC -XX:+CMSConcurrentMTEnabled -XX:+CMSClassUnloadingEnabled -XX:+UseParNewGC -XX:-OmitStackTraceInFastThrow -Djavax.net.ssl.trustStore=/etc/pki/ca-trust/extracted/java/cacerts"
|
|
|
|
# Pass some extra args to graylog-server. (i.e. "-d" to enable debug mode)
|
|
GRAYLOG_SERVER_ARGS=""
|
|
|
|
# Program that will be used to wrap the graylog-server command. Useful to
|
|
# support programs like authbind.
|
|
GRAYLOG_COMMAND_WRAPPER=""
|