[Service]
# Allow graylog-server to bind to the privileged Syslog UDP port
AmbientCapabilities=CAP_NET_BIND_SERVICE