@Tanawat
Hello,
Judging from the picture, looks like you need more memory.
Or
You over committed memory.
How much total memory do you have for Graylog?
What does this files look like?
/etc/elasticsearch/jvm.options
/var/log/elasticsearch/hs_err_pid495.log
/etc/default/graylog-server