Single node server - stopped processing messages after disk full incident

Not sure what order you did things in, but according to this post by @jan, you should stop graylog, purge the journal, then start graylog. Seems a similar situation to yours.

Also, make sure ES isn’t in a read only state. That can happen with low available space issues.