The content length (938946807) is bigger than the maximum allowed string (536870888) sending logstash-plain.log to elasticsearch

You have issue with Elasticsearch.
By default ES use 50% of RAM, if you haven't set in jvm.options