What are the JVM settings of Graylog and Elasticsearch on that machine? What’s in the logs of that Graylog node?