Change Graylog Web Interface Background

Customizing Graylog Background and Colors

Last Updated: 
Graylog logon page with customized background

Graylog is a quick and reliable tool for basic, centralized log collection and review. It does have some limitations and lacks deep tools needed to fill more challenging usage scenarios - but for what it was intended to do it is a great solution. Any IT team can easily have GRAYLOG up and running quickly as a solid platform for centralized log searches, amalgamation, parsing and even some basic analysis.

Graylog is a combination of Elasticsearch data storage and MongoDB tied together with a Java-based Graylog web application and components. Anyone familiar with modern programming languages knows JAVA has a few very strong benefits - like not having to integrate, load and fiddle with 1,000s of finicky third-party packages, but one of the often encountered downsides is JAVA is fairly inaccessible to make quick and dirty changes, adjustments or customizations - perhaps both a problem and a strength.

Deploying Graylog we have encountered situations where we needed a generic flat-grey deployment and others required us to match corporate or enterprise branding requirements to appease management level scrutiny.

Main Graylog content page with customized colors and background

There are many ways to customize the images, colors and look of GRAYLOG. The best way is to build a JAVA development machine, download the source code and recompile the graylog.jar file for your deployment. This is not as difficult as it seems and there are many writeups available on the web to assist.

If you don't have access to, knowledge of, or time available to dig a little into JAVA development there are several ways to easily customize the Graylog web interface without needing to re-compile. Here is one of those ways...

  1. Open an SSH connection to your Graylog server console - recommend using WinSCP
  2. Stop your Graylog server (systemctl stop graylog-server on CentOS 7)
  3. Find and backup (duplicate) your main Graylogs jar file (/usr/share/graylog-server/graylog.jar on CentOS 7).
  4. Copy graylog.jar down to you local desktop
  5. Open the graylog.jar archive file using 7zip (only use 7zip) on your desktop, leave open
  6. Inside the archive navigate to \web-interface\ folder and copy "index.html.template" file to your desktop
  7. Open "index.html.template" on your desktop with a text editor (NOT WORD) and add the line
    <link href="${appPrefix}assets/custom.css" rel="stylesheet"> 

    right above the "${foreach" line, below the "favicon.png" line, and save

  8. Create a custom.css text file with css settings for body background URL and .navbar-inverse (toolbar color). See our example css file - you should use the "!important" parameter to ensure it overides direct element styling
  9. Copy the "index.html.template" file back to the still open 7zip graylog.jar archive window in the \web-interface\ folder, replacing the existing file
  10. Copy the custom.css and your background image file to the \web-interface\assets folder in the open graylog.jar archive
  11. Close 7zip and copy your updated graylog.jar file up to your Graylog server (/usr/share/graylog-server/graylog.jar) to replace the existing one - SINCE YOU HAVE A BACKUP COPY, RIGHT?!
  12. Start Graylog server (systemctl start graylog-server)
  13. Clear your browser cache and check if you web interface looks the way you want.
  14. Edit the CSS file and re-insert and re-upload graylog.jar as needed

You can download our sample index.html.template, custom.css and background.png file set

Cordeos provides IT supports, managed IT services, consulting, design, deployment and outsourced CIO support to businesses around the world. Our team has deployed numerous log collection, analysis and security review systems. Graylog is one of the tools we use often due to its ease of setup and low maintenance, management and upgrade issues.


What versions of Graylog does this work for?

This should work on any recent Graylog version. We've tested doing quick color and background image changes on Graylog server 3.0+ up to 3.3.2 latest.

Sitemap | Tech Articles | Cordeos News | Tech Notes | IT Support Jobs