#!/bin/bash
#关闭SELINUX
sed -i 's/enforcing/disabled/g' /etc/selinux/config
setenforce 0
#解压安装包
mkdir -p /opt/GrayLog_install
tar -zxvf ./GrayLog7.2.0_MongoDB8.2.5_DataNode7.2.0_EL9_RPM.tar.gz -C /opt/GrayLog_install
cat > /etc/yum.repos.d/mongodb-org.repo << \\EOF
[mongodb-org-8.2]
name=MongoDB Repository
baseurl=https://repo.mongodb.org/yum/redhat/9/mongodb-org/8.2/x86_64/
gpgcheck=0
enabled=1
EOF
cd /opt/GrayLog_install
#安装mongodb-server服务
rpm -ivh cyrus-sasl*.rpm
rpm -ivh mongodb*.rpm

#启动mongodb-server服务
systemctl daemon-reload
systemctl enable mongod.service
systemctl start mongod.service
systemctl --type=service --state=active | grep mongod
firewall-cmd --add-port=27017/tcp --permanent --zone=public
firewall-cmd --reload

#安装graylog-datanode（其内置OpenSearch）
rpm -ivh /opt/GrayLog_install/graylog-datanode-7.2.0-11.x86_64.rpm
#Ensure that the Linux setting vm.max_map_count is set to at least 262144
echo'vm.max_map_count=262144' | sudo tee -a /etc/sysctl.d/99-graylog-datanode.conf
sysctl --system
cat /proc/sys/vm/max_map_count
#根据官方文档openssl rand -hex 32命令随机生成password_secret
#可以自行使用sudo openssl rand -hex 32命令随机生成password_secret并在/etc/graylog/datanode/datanode.conf文件中进行替换
sed -i \"s/password_secret =/password_secret = 923d7af5ae3049978a19d328bea02935c2400688222e3b0f0217b6d159af5e47/g\" /etc/graylog/datanode/datanode.conf

#修改graylog-datanode中opensearch日志数据存储目录到/data目录下，方便后期扩容
mkdir -p /data/graylog-datanode/opensearch/data
mkdir -p /data/graylog-datanode/opensearch/logs
chown -R graylog-datanode:graylog-datanode /data/graylog-datanode
sed -i \"s|opensearch_data_location = /var/lib/graylog-datanode/opensearch/data|opensearch_data_location = /data/graylog-datanode/opensearch/data/|g\" /etc/graylog/datanode/datanode.conf
sed -i \"s|opensearch_logs_location = /var/log/graylog-datanode/opensearch|opensearch_logs_location = /data/graylog-datanode/opensearch/logs/|g\" /etc/graylog/datanode/datanode.conf
systemctl daemon-reload
systemctl enable graylog-datanode.service
systemctl start graylog-datanode.service
#安装graylog-server服务
rpm -ivh  /opt/GrayLog_install/graylog-server-7.2.0-11.x86_64.rpm
cp /etc/graylog/server/server.conf /etc/graylog/server/server.conf_default
#修改graylog-server相关配置文件
sed -i \"s/password_secret =/password_secret = 923d7af5ae3049978a19d328bea02935c2400688222e3b0f0217b6d159af5e47/g\" /etc/graylog/server/server.conf
sed -i \"s/root_password_sha2 =/root_password_sha2 = fdf5e0ba25719d981ae4bd3edd465d71fb91e1d113bdf62a0b0a9963711163ef/g\" /etc/graylog/server/server.conf
sed -i \"s@#root_timezone = UTC@root_timezone = Asia/Shanghai@g\" /etc/graylog/server/server.conf
sed -i \"s@#http_bind_address = 127.0.0.1:9000@http_bind_address = 0.0.0.0:9000@g\" /etc/graylog/server/server.conf
sed -i \"s/allow_highlighting = false/allow_highlighting = true/g\" /etc/graylog/server/server.conf
#修改graylog-server启动时JVM内存大小
sed -i \"s/-Xms1g -Xmx1g/-Xms2g -Xmx2g/g\" /etc/sysconfig/graylog-server

firewall-cmd --add-port=9000/tcp --permanent --zone=public
firewall-cmd --reload
#启动graylog-server服务
systemctl daemon-reload
systemctl restart graylog-server
systemctl enable graylog-server
#请根据最后graylog-server日志文件中的登录账号与密码 浏览器登录Graylog Web界面进行初始化
#tail -f /var/log/graylog-server/server.log | grep \"0.0.0.0:9000\"