Can you show what you are doing?
What commands did you execute?
This would be your Journal (file:///var/lib/graylog-server/journal/) and you stated its filling up. It might be related to elasticsearch. It could also be from resources or perhaps a misconfiguration in your Graylog config file. I cant say for sure since the lack of information about your environment.
To get a better idea to help us, help you take a look at the link I provided. This might enlighten you on what we need to see if you haven’t seen this already.
