Anomality with used space

Is it a Linux docker node?
If so, then please search for OOM kills:

journalctl | grep shim

Also, it’s worth to check all databases: