Diagnosing so-redis missing

[ghost]

.

[ghost]

[cm-ops]

Have you also looked in your Elasticsearch log? /opt/so/log/elasticsearch/securityonion.log

There is high swap usage too. In Influxdb in the Container Events panel, what does so-redis say? Was it OOM killed?