Strelka not working - Error: No such container

[Chizan-Dolrocks]

Hello All,
I installed security onion recently in distribute mode, everything was fine until I ran a scenario on detecting malicious files by strelka with Yara rules I got nothing as alerts. After that, I tried to restart strelka with: sudo so-strelka-restart
here is the answer I got:

after that I tried this command: sudo docker logs so-strelka and I got this error :

finally, I tried this command: sudo docker images | grep strelka and I got this result :

docker-images.txt

Thank you for your response and help.

[dougburks]

The first screenshot shows the error message strelka_state_not_allowed. This most likely means that you were trying to restart Strelka on your manager, but Strelka does not run on your manager. Strelka runs on forward nodes since that is where files are extracted from network traffic.