Graylog2 logging server setup script. More information about this script and what its for can be found in this blogpost: https://thevivi.net/2018/03/23/attack-infrastructure-logging-part-1-logging-server-setup/
Change the following settings at the top of the script before running it:
- username = 'admin'
- password = 'Str0ng_Pa55w0rd'
- bind_port = '9000'
- In openssl_config, change the 'IP.1 = 127.0.0.1' to match the IP address of your server i.e. IP.1 = YOUR_IP_ADDRESS
I've only tested this on Debian 9, it may require a little tweaking for use on other operating systems.
$ sudo python graylog-setup.py