Configuring Chronograf

Chronograf is configured by passing command line options when starting the Chronograf service. However, it is also possible to set custom default configuration options in the filesystem so they don’t have to be passed in when starting Chronograf.

Starting the Chronograf service

Start Chronograf using the default configuration options, or customize your configuration with environment variables and command line options (for example, to configure OAuth 2.0 authentication) based on your requirements.

Linux:

sudo systemctl start chronograf [OPTIONS]

macOS:

chronograf [OPTIONS]

[OPTIONS] are available Chronograf command line options, separated by spaces. See the Chronograf configuration options documentation for details about configuration options, including command line options and corresponding environment variables.

Setting custom default Chronograf config options

Custom default Chronograf configuration settings can be defined in /etc/default/chronograf. This file consists of key-value pairs. See keys (environment variables) for Chronograf configuration options, and set values for the keys you want to configure.

HOST=0.0.0.0
PORT=8888
TLS_CERTIFICATE=/path/to/cert.pem
TOKEN_SECRET=MySup3rS3cretT0k3n
LOG_LEVEL=info

Note: /etc/default/chronograf is only created in Linux-based operating systems. It is neither created nor used in macOS.

Setting up security, organizations, and users

To set up security for Chronograf, configure:

• OAuth 2.0 authentication
• TLS (Transport Layer Security) for HTTPS

After you configure OAuth 2.0 authentication, you can set up multiple organizations, roles, and users. For details, check out the following topics:

• Managing organizations
• Managing Chronograf users