This file only contains the upgrade note for the upcoming release. Please see our documentation for the complete upgrade notes.
Graylog 3.0 drops support for Elasticsearch versions before 5.6.x. That means you have to upgrade Elasticsearch to at least version 5.6.5 before upgrading Graylog to version 3.0. Make sure to read the Elasticsearch upgrade guides before doing that.
Graylog used to have a lot of different settings regarding the various HTTP interfaces it provides, namely the Graylog REST API and the Graylog web interface.
This mostly originates from the fact that Graylog used to consist of two components before Graylog 2.0.0, a server component and a separate web interface.
The changes in this release finally merge the HTTP listeners for the Graylog REST API and web interface into a single HTTP listener, which should make the initial configuration of Graylog simpler and reduce errors caused by conflicting settings.
The path of the Graylog REST API is now hard-coded to /api
, so if you're still using the legacy URI on port 12900/tcp or have been using a custom path (via the rest_listen_uri
or rest_transport_uri
settings), you'll have to update the URI used to access the Graylog REST API.
If you are using a reverse proxy in front of Graylog (like nginx) and configured it to set the X-Graylog-Server-URL
HTTP header, you have to remove the api/
suffix because that is now the default. (as mentioned above)
Example:
# This nginx setting in Graylog <3.0 ... header_upstream X-Graylog-Server-URL http://{host}/api # ... needs to be changed to the following with Graylog 3.0 header_upstream X-Graylog-Server-URL http://{host}/
For a more detailed description of the new HTTP settings, please consult the annotated Graylog configuration file.
Overview of removed Graylog REST API settings:
Removed Setting | New Setting | Default |
---|---|---|
rest_listen_uri |
http_bind_address |
127.0.0.1:9000 |
rest_transport_uri |
http_publish_uri |
http://$http_bind_address/ |
web_endpoint_uri |
http_external_uri |
$http_publish_uri |
rest_enable_cors |
http_enable_cors |
true |
rest_enable_gzip |
http_enable_gzip |
true |
rest_max_header_size |
http_max_header_size |
8192 |
rest_max_initial_line_length |
http_max_initial_line_length |
4096 |
rest_thread_pool_size |
http_thread_pool_size |
16 |
rest_enable_tls |
http_enable_tls |
false |
rest_tls_cert_file |
http_tls_cert_file |
Empty |
rest_tls_key_file |
http_tls_key_file |
Empty |
rest_tls_key_password |
http_tls_key_password |
Empty |
Overview of removed Graylog web interface settings:
Removed Setting | New Setting | Default |
---|---|---|
web_enable |
None | |
web_listen_uri |
http_bind_address |
127.0.0.1:9000 |
web_enable_cors |
http_enable_cors |
true |
web_enable_gzip |
http_enable_gzip |
true |
web_max_header_size |
http_max_header_size |
8192 |
web_max_initial_line_length |
http_max_initial_line_length |
4096 |
web_thread_pool_size |
http_thread_pool_size |
16 |
web_enable_tls |
http_enable_tls |
false |
web_tls_cert_file |
http_tls_cert_file |
Empty |
web_tls_key_file |
http_tls_key_file |
Empty |
web_tls_key_password |
http_tls_key_password |
Empty |