Centralized logging setup in Docker - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is centralized logging in Docker environments?

Centralized logging means collecting logs from multiple Docker containers or hosts into one place. This helps to easily monitor and troubleshoot applications.

beginner

Name a popular tool used for centralized logging with Docker.

Elasticsearch, Logstash, and Kibana (ELK stack) is a popular toolset for centralized logging. Fluentd and Graylog are also common choices.

intermediate

How do you configure Docker to send container logs to a centralized logging driver?

You set the logging driver in the Docker daemon or per container using the --log-driver option, for example: docker run --log-driver=json-file or --log-driver=fluentd.

intermediate

What is the role of Logstash in a centralized logging setup?

Logstash collects, processes, and forwards logs from Docker containers to storage or analysis tools like Elasticsearch.

beginner

Why is centralized logging better than checking logs on individual Docker containers?

Centralized logging saves time by gathering all logs in one place. It helps spot patterns, errors, and issues faster than checking each container separately.

Which Docker option sets the logging driver for a container?

A --log-driver

B --log-level

C --log-output

D --log-path

The --log-driver option specifies which logging driver Docker uses for container logs.

What does the ELK stack stand for in centralized logging?

A Elastic, Logrotate, Kinesis

B Elasticsearch, Logstash, Kibana

C Event, Log, Key

D Endpoint, Logger, Kafka

ELK stands for Elasticsearch, Logstash, and Kibana, a common centralized logging stack.

Which tool is used to visualize logs in a centralized logging setup?

A Docker Compose

B Fluentd

C Kibana

D Prometheus

Kibana is used to visualize and explore logs stored in Elasticsearch.

What is the main benefit of centralized logging?

A Collect logs from many sources in one place

B Reduce container size

C Increase container startup speed

D Encrypt container data

Centralized logging collects logs from many containers or hosts into one place for easier analysis.

Which logging driver sends Docker logs to Fluentd?

A journald

B json-file

C syslog

D fluentd

The fluentd logging driver sends container logs to a Fluentd collector.

Explain how to set up centralized logging for Docker containers using the ELK stack.

Think about how logs flow from containers to the ELK components.

Describe the advantages of using centralized logging in a multi-container Docker environment.

Consider how managing logs individually compares to a central system.