the server was with high cpu usage alarming in my vmware, i got inside it and after looking the system and logs, the server was overwhelmed by graylog connections.
Nothing shows in graylog logs, but i can see that my mongo being hammered by my graylog because there’s only graylog db that is allocated in this mongodb cluster.