Just chiming in, by chance have you tried manually rotating you index called firewall_graylog__2 to see if it clears things up?
Have you seen this post when updating a cluster?
Also you MongoDb is version 5.0. I’m not 100% sure but I think the correct version would be no higher then MongDb 4.4