Running

net stop com.docker.service
taskkill /IM "dockerd.exe" /F
taskkill /IM "Docker for Windows.exe" /F
net start com.docker.service
& "c:\program files\docker\docker\Docker for Windows.exe"

cd ~/opt/graylog
docker-compose up

Windows

docker exec --user root -it graylog_graylog_1 /bin/bash
sed -i 's/\(message_journal_enabled\).*/\1 = false/g' data/config/graylog.conf

Alternative: http://docs.graylog.org/en/3.0/pages/installation/virtual_machine_appliances.html#virtual-machine-appliances

Testing

apt upgrade apt install net-tools netcat vim

netstat -tulpn | grep 12201 => UDP

curl -v -X POST http://localhost:12201/gelf -d '{"short_message":"Hello there", "host":"example.org", "facility":"test", "_foo":"bar"}' => TCP 127.0.0.1:12201 127.0.0.1:45856 TIME_WAIT 0

echo -n -e '{ "version": "1.1", "host": "example.org", "short_message": "A short message", "level": 5, "_some_info": "foo" }'"\0" >/dev/udp/127.0.0.1/12201 || echo -n -e '{ "version": "1.1", "host": "example.org", "short_message": "A short message", "level": 5, "_some_info": "foo" }'"\0" | nc -vv -u -w1 127.0.0.1 12201 => OK || ps1 !! powershell mangles null bytes => https://stackoverflow.com/questions/31855705/write-bytes-to-a-file-natively-in-powershell powercat -c 127.0.0.1 -p 12201 -u -t 1 -i C:\Users\foo\1

echo 'First log message' | nc 127.0.0.1 5555 || ps1 echo 'First log message' | powercat -c 127.0.0.1 -p 5555 => OK

Clear logs

echo "" > $(docker inspect --format='{{.LogPath}}' container_name) || ps1 https://blog.jongallant.com/2017/11/ssh-into-docker-vm-windows/ "C:\Users\Public\Documents\Hyper-V\Virtual hard disks\MobyLinuxVM.vhdx"