环境阿里云 比如外网IP： 47.117.49.208 内网：172.28.151.155

elasticsearch

docker run -d -p 9200:9200 -p 9300:9300 docker.elastic.co/elasticsearch/elasticsearch-oss:6.6.1

graylog

version: '2'
services:
  # Graylog: https://hub.docker.com/r/graylog/graylog/
  graylog:
    restart: always
    image: graylog_3.0
    container_name: graylog
    volumes:
      - /data/graylog/config:/usr/share/graylog/data/config
      #- /data/graylog:/usr/share/graylog/data/journal
    environment:
      # CHANGE ME (must be at least 16 characters)!
      - GRAYLOG_PASSWORD_SECRET=somepasswordpepper
      # echo -n "Enter Password: " && head -1 </dev/stdin | tr -d '
' | sha256sum | cut -d" " -f1
      - GRAYLOG_ROOT_PASSWORD_SHA2=cf00d4904dbc6b5215dcf15asd45672efcb191b6e592d954asddedfd69
      - GRAYLOG_HTTP_EXTERNAL_URI=http://47.117.49.208:9000/
      - GRAYLOG_ELASTICSEARCH_HOSTS=http://172.28.151.155:9200
      #
      - GRAYLOG_MONGODB_URI=mongodb://172.28.151.155/graylog
      #
      - GRAYLOG_ROOT_TIMEZONE=Asia/Shanghai
      #
      - GRAYLOG_WEB_ENDPOINT_URI=http://47.117.49.208:9000/api
      - GRAYLOG_WEB_LISTEN_URI=http://0.0.0.0:9000/
      - GRAYLOG_REST_LISTEN_URI=http://0.0.0.0:9000/api
    ports:
      # Graylog web interface and REST API
      - 9000:9000
      # Syslog TCP
      - 1514:1514
      # Syslog UDP
      - 1514:1514/udp
      # GELF TCP
      - 12201:12201
      # GELF UDP
      - 12201:12201/udp

mongo

[root@abc mongo]# cat docker-compose.yml 
version: '2'
services:
  graylog-mongo:
    restart: always
    image: mongo_3.6.4
    container_name: graylog-mongo
    volumes:
      - /data/graylog-mongo:/data/db
    ports:
      - 27017:27017