I assume it's a continuation of this discussion? Filebeat OOM
In the old issue the gc limit was at about 13.6GB, but the metrics here say the GC limit is at ~162MB.
Is filebeat restarted between the two log metrics? The gc_next value didn't really change much.
Can you post the complete oom killer log (also check /var/log/dmesg). Should start with <name> invoked oom-killer, contain some stats, a long table and finally have a line like Killed process <pid> with some extra stats.
If I read the logs correctly, then the value of 4002812 is total_vm in 4KB (which can be quite big, as go runtime over-reserves virtual addressed, without yet allocating physical pages), and 3641509 is the rss in 4KB. The later value does not match the metrics as reported by filebeat, but then the timestamps do not add up.
For how long was filebeat running before it was killed?