Greylog Docker 4.3.9 - Not starting

I had Graylog running awhile back and am now just getting time to get back to it. After creating the docker container again for Graylog, Mongo, and elasticsearch I ran into some issues.
Following the docker setup, the docker crashes. indicating that it can not write to the journal path.

2. Describe your environment:
Docker running under Unraid

Package Version: 4.3.9

Name: graylog

Overview: Official Graylog Docker image.

For more variables see the Graylog configuration file: …

The default root user is named ‘admin’

To create the SHA256 string run ‘echo -n YOUR16CHARACTERPASSWORD | sha256sum’

Additional Requirements:

Repository: graylog/graylog:4.3.9

Docker Hub URL: Docker

Icon URL:

WebUI: http://[IP]:[PORT:9000]

Extra Parameters:

Post Arguments:

CPU Pinning:

Network Type: Host

Console shell command: Shell

Privileged: OFF








Graylog web interface and REST API: 9000 (Container Port: 9000)

Syslog TCP: 1514 (Container Port: 1514)

Syslog UDP: 1514 (Container Port: 1514)

GELF TCP: 12201 (Container Port: 12201)

GELF UDP: 12201 (Container Port: 12201)

MongoDB connection string: mongodb://

Container Variable: GRAYLOG_MONGODB_URI

List of Elasticsearch hosts Graylog should connect to:


Need to be specified as a comma-separated list of valid URIs for the http ports of your elasticsearch nodes

Appdata: /mnt/user/appdata/greylog

Container Path: /usr/share/graylog/data/journal

Last line of Docker log:
“2022-12-27 15:56:07,662 ERROR: org.graylog2.bootstrap.preflight.PreflightCheckService - Preflight
check failed with error: Journal directory </usr/share/graylog/data/journal> is not writable!”

3. What steps have you already taken to try and solve the problem?
Found that the host path that had been created under appdata, had folder permissions that were set to root only from the docker setup, I adjusted the permissions to “drwxrwxr-x 1 root users 0 Dec 26 19:39 greylog/” and made sure that the users group had this folder.

4. How can the community help?
Has anyone run into this recently, I do not remember having this problem the last time I started to set things up. Since the users group has read/write to the folder I’m not sure where to look at the moment for the underlying cause.
strong text

GL uses a dedicated graylog group with ID 1100. You need to give that write permissions to your journal directory.

1 Like

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.