Please don't use citation then code format when formatting your code.
> # This is wrong
# This is correct
Anyway, why do you mix your data and logs?
path.data: /opt/logs
looks a wrong directory IMO.
But the problem is:
Feb 03 17:15:01 graylog elasticsearch[12512]: # There is insufficient memory for the Java Runtime Environment to continue.