Graylog 3.1 Appliance, High CPU 100%

Do you use Grok Patterns? Maybe it is a runaway grok pattern. In Graylog nodes stop outputting/fill up buffers you might find a solution.