Hmmmm, that’s a bit bizarre. Can you include the information mentioned in Questions and You: A guide to getting an answer? It’d be helpful to see things like your syslog config, your input configuration, and know how much heap you have assigned to Graylog.