Deprecation Note

We published the last version of Graylog Documentation before the release of Graylog 4.2. Now, all documentation and help content for Graylog products are available at https://docs.graylog.org/.

There will be no further updates to these pages as of October 2021.

Do you have questions about our documentation? You may place comments or start discussions about documentation here: https://community.graylog.org/c/documentation-campfire/30

Default file locations¶

Each installation flavor of Graylog will place the configuration files into a specific location on the local files system. The goal of this section is to provide a short overview about the most common and most important default file locations.

DEB package¶

This paragraph covers Graylog installations on Ubuntu Linux, Debian Linux, and Debian derivates installed with the DEB package.

Graylog¶

	File system path
Configuration	`/etc/graylog/server/server.conf`
Logging configuration	`/etc/graylog/server/log4j2.xml`
Plugins	`/usr/share/graylog-server/plugin`
Binaries	`/usr/share/graylog-server/bin`
Scripts	`/usr/share/graylog-server/scripts`
JVM settings	`/etc/default/graylog-server`
Message journal files	`/var/lib/graylog-server/journal`
Log Files	`/var/log/graylog-server/`

Elasticsearch¶

Note

These are only the most common file locations. Please refer to the Elasticsearch documentation for a comprehensive list of default file locations.

	File system path
Configuration	`/etc/elasticsearch`
JVM settings	`/etc/default/elasticsearch`
Data files	`/var/lib/elasticsearch/data`
Log files	`/var/log/elasticsearch/`

MongoDB¶

	File system path
Configuration	`/etc/mongod.conf`
Data files	`/var/lib/mongodb/`
Log files	`/var/log/mongodb/`

RPM package¶

This paragraph covers Graylog installations on Fedora Linux, Red Hat Enterprise Linux, CentOS Linux, and other Red Hat Linux derivates installed with the RPM package.

Graylog¶

	File system path
Configuration	`/etc/graylog/server/server.conf`
Logging configuration	`/etc/graylog/server/log4j2.xml`
Plugins	`/usr/share/graylog-server/plugin`
Binaries	`/usr/share/graylog-server/bin`
Scripts	`/usr/share/graylog-server/scripts`
JVM settings	`/etc/sysconfig/graylog-server`
Message journal files	`/var/lib/graylog-server/journal`
Log Files	`/var/log/graylog-server/`

Elasticsearch¶

Note

These are only the most common file locations. Please refer to the Elasticsearch documentation for a comprehensive list of default file locations.

	File system path
Configuration	`/etc/elasticsearch`
JVM settings	`/etc/sysconfig/elasticsearch`
Data files	`/var/lib/elasticsearch/`
Log files	`/var/log/elasticsearch/`

MongoDB¶

	File system path
Configuration	`/etc/mongod.conf`
Data files	`/var/lib/mongodb/`
Log files	`/var/log/mongodb/`