Build from source. Personally I have not seen anybody do this and report back.
IIRC Graylog requires very little from MongoDB and the heavy duty portion falls to elastic search. As another option a M0 instance on MongoDB Atlas would likely be adequate