Overview
Graylog is a log management platform for collecting, storing and searching logs from servers, applications, containers and network devices in one place. IT and security teams use it to find the cause of errors quickly, keep logs for audits, and get alerts when patterns appear. This image gives operations teams a working Graylog server in minutes, with the search back end and database already set up.
What is included: Graylog 7.1.9 on Ubuntu 24.04 LTS with its search back end, MongoDB, Nginx as a reverse proxy on port 80 and Mongo Express for database browsing. Graylog's external address follows the instance's public IP automatically. Security is on by default: no password ships in the image. On first boot every instance sets its own Graylog admin and Mongo Express passwords and a new Graylog password secret, the database and search services listen only on the server itself, and SSH accepts key-based login only.
What you get on top of the free software: a pre-built and tested image that is ready in minutes, a unique security setup for every server, simple scripts for changing passwords, regular image updates, and help by email whenever you need it. Graylog Open is licensed under SSPL, and MongoDB Community Server under SSPL. Graylog is a trademark of Graylog, Inc., and MongoDB is a trademark of MongoDB, Inc. This image is an independent build by ProvenCloud.
Highlights
- Ready in minutes: launch the instance, open its public IP in your browser and sign in. Graylog 7.1, its search back end, MongoDB and Mongo Express are already installed and configured.
- Secure by default: no shared or default passwords. Every instance sets its own Graylog and Mongo Express passwords on first boot and a new Graylog password secret is generated, and SSH accepts key-based login only.
- Find problems fast: send logs from servers, apps and network devices, search them in seconds, build dashboards and get alerts when something goes wrong.
Details
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
Pricing
Free trial
- ...
Dimension | Cost/hour |
|---|---|
t3a.large Recommended | $0.03 |
t2.micro | $0.03 |
t3.micro | $0.03 |
c7a.medium | $0.03 |
c8a.medium | $0.03 |
m1.medium | $0.03 |
m1.small | $0.03 |
m3.medium | $0.03 |
m7a.medium | $0.03 |
m8a.medium | $0.03 |
Vendor refund policy
Software charges are billed hourly, only while your instance runs. You can stop charges at any time by terminating the instance or cancelling your subscription. Charges already incurred are not refundable.
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Latest stable release on AWS Marketplace.
Graylog 7.1.9 on Ubuntu 24.04 LTS with MongoDB, Nginx and Mongo Express.
Unique Graylog and Mongo Express passwords and a new password secret are set for every instance on first boot.
Includes helper scripts in /home/ubuntu/iscripts for changing passwords.
Additional details
Usage instructions
Once the instance is running, enter http://<instance-public-ip> into your browser. Wait about five minutes the first time while Graylog starts, then sign in with admin as the username and your instance ID as the password. Mongo Express is at http://<instance-public-ip>:8081; sign in with admin and your instance ID. You can also connect over SSH with the username ubuntu and your Amazon key pair.
Required inbound ports: 22 (SSH), 80 (Graylog) and 8081 (Mongo Express). When you add a Graylog input, for example Syslog on port 1514, open that port only to the machines that send logs. For security, allow ports 22 and 8081 only from your own IP address.
Your instance ID is shown in the EC2 console, for example i-0123456789abcdef0. Every instance sets its own passwords on first boot, so no two instances share a password.
Change your passwords after the first sign-in: connect over SSH and run sudo bash /home/ubuntu/iscripts/pass_graylog.sh for Graylog or pass_mongoexpress.sh for Mongo Express, from the same folder.
The image serves plain HTTP so it works on a bare IP address. Before using it in production, add your own domain and an SSL certificate, or place it behind a load balancer with HTTPS.
Support
Vendor support
Email: support@provencloud.io
Support page: https://www.provencloud.io/support
Hours: Monday to Friday, 10:00 to 19:00 IST (UTC+05:30)
Billing and refunds for this subscription are handled by AWS Marketplace.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.