Well, whatever I'm going with, it's not going to be graylog. I guess my cpu is to old / does not have avx support so running up to date mongo db is out and greylog needs mongodb. And useing ferret (a newer postgres based but mongo compatable database) does not work. 😅 shit.