Arch Linux User Repository

I would suggest using the following in the systemd service

ExecStart=/usr/bin/java -Djava.net.preferIPv6Addresses=true -Djava.library.path=/usr/lib/graylog/lib/sigar -Xms1g -Xmx1g -XX:NewRatio=1 -server -XX:+ResizeTLAB -XX:+UseConcMarkSweepGC -XX:+CMSConcurrentMTEnabled -XX:+CMSClassUnloadingEnabled -XX:+UseParNewGC -XX:-OmitStackTraceInFastThrow -jar /usr/lib/graylog/server.jar server -f /etc/graylog/server/server.conf -p /run/graylog/server.pid
StandardOutput=syslog
StandardError=syslog
SyslogIdentifier=graylog

and then users of this package can use syslog-ng to capture the graylog output to a specific file using filters in syslog-ng.conf.

As well, I found that running service as nobody doesn't work, but rather using root. I suppose a better way is to create a specific user/group for this service.

The JRE needs to be updated to jre8 vs jre7 otherwise you will experience the following error: "Unsupported major minor version 52.0".

Suppport: https://github.com/Graylog2/graylog2-server/issues/2256

Since graylog.service depends on mongodb.service that shouldn't be an optional dependency.

@aurifier Oops, fixed that. It has no negative impact on your install btw

When I installed the package I got the following message:

/tmp/alpm_PHvFTR/.INSTALL: line 6: EOF: command not found
error: command failed to execute correctly

I haven't yet checked to see if that caused a problem.

@sauliusl thanks for the report; I forgot the checksum. Fixed now

validity check fails for the current package.

==> Validating source files with sha256sums...
graylog-2.0.0-beta.3.tgz ... FAILED
graylog-tmpfiles.conf ... Skipped
graylog.service ... Skipped
==> ERROR: One or more files did not pass the validity check!

@Spider.007 you might be right, however, the build fails with the current PKGBUILD.

==> Install or build missing dependencies for graylog:
error: target not found: elasticsearch<2.0

Older versions can be retrieved from ALA http://ala.seblu.net/packages/e/elasticsearch/

Good luck.

@supersym; you're wrong. The <2 is there to prevent upgrading to elasticsearch-2 which Graylog isn't compatible with. If you remove that; it will build & install, but won't work.

==> Missing dependencies:
-> elasticsearch<2.0
==> Checking buildtime dependencies...
==> ERROR: Could not resolve all dependencies.
The build failed.

Dependency does not exist. Remove the '<2.0' does help