Hello @shotarry
Example: To see the full logs as this issue is happing, I would use something like this.
root# tail -f /var/log/graylog-server/server.log
Then show my logs like this in this type of format 
2022-08-31T16:51:43.066-05:00 INFO [ServerBootstrap] Graylog server up and running.
2022-08-31T16:51:43.066-05:00 ERROR [AuditLogger] Unable to write audit log entry because there is no valid license.
2022-08-31T16:51:43.128-05:00 INFO [connection] Opened connection [connectionId{localValue:11, serverValue:62}] to localhost:27017
2022-08-31T16:51:43.138-05:00 INFO [connection] Opened connection [connectionId{localValue:12, serverValue:63}] to localhost:27017
2022-08-31T16:51:43.149-05:00 INFO [connection] Opened connection [connectionId{localValue:13, serverValue:64}] to localhost:27017
2022-08-31T16:51:43.168-05:00 INFO [connection] Opened connection [connectionId{localValue:14, serverValue:65}] to localhost:27017
2022-08-31T16:51:43.206-05:00 INFO [InputLauncher] Launching input [GELF TCP/Windows System Secure/5a62903bffe8b1e04bd2fe89] - desired state is RUNNING
2022-08-31T16:51:43.226-05:00 INFO [InputLauncher] Launching input [Raw/Plaintext UDP/Security Devices/5a6965ef83d72e84ac7ca99b] - desired state is RUNNING
2022-08-31T16:51:43.228-05:00 INFO [InputLauncher] Launching input [GELF TCP/Linux Secure System/5e265ada83d72ec570ab5fe2] - desired state is RUNNING
2022-08-31T16:51:43.232-05:00 INFO [AbstractTcpTransport] Enabled TLS for input [GELF TCP/5a62903bffe8b1e04bd2fe89]. key-file="/etc/graylog/graylog3-key.pem" cert-file="/etc/graylog/graylog3-certificate.pem"
2022-08-31T16:51:43.233-05:00 INFO [InputLauncher] Launching input [Raw/Plaintext UDP/Network Devices (Force 10)/5e9f732383d72e05f668a26d] - desired state is RUNNING
2022-08-31T16:51:43.234-05:00 INFO [AbstractTcpTransport] Enabled TLS for input [GELF TCP/5e265ada83d72ec570ab5fe2]. key-file="/etc/graylog/graylog3-key.pem" cert-file="/etc/graylog/graylog3-certificate.pem"
2022-08-31T16:51:43.236-05:00 INFO [InputLauncher] Launching input [NetFlow UDP/NetFlow/61930ee96cfcf9713fe14bf2] - desired state is RUNNING
2022-08-31T16:51:43.240-05:00 INFO [InputStateListener] Input [GELF TCP/5a62903bffe8b1e04bd2fe89] is now STARTING
2022-08-31T16:51:43.240-05:00 INFO [InputLauncher] Launching input [Beats/ Beats/619318e9d1f2fd03dc7b4b4c] - desired state is RUNNING
2022-08-31T16:51:43.243-05:00 INFO [InputStateListener] Input [Raw/Plaintext UDP/5a6965ef83d72e84ac7ca99b] is now STARTING
2022-08-31T16:51:43.249-05:00 INFO [InputStateListener] Input [GELF TCP/5e265ada83d72ec570ab5fe2] is now STARTING
Its hard to help not seeing what’s going on, so more information you give us might be able to help diagnose the issue. If you unsure please look at this post