Meta tags:
description=Learn how to read container logs locally when using a third party logging solution. ;
keywords=docker,logging,driver,dual,logging,dual,logging,cache,ring-buffer,configuration;

Headings (most frequently used words):

logging, with, dual, capability, use, docker, logs, remote, drivers, overview, prerequisites, disable, the, cache, limitations, what, can, help, you, without, configuration, options,

Text of the page (most frequently used words):
#docker (97), the (78), logging (53), and (49), driver (47), cache (35), with (34), use (34), logs (33), engine (33), image (23), swarm (23), container (22), for (22), build (21), dual (20), file (19), daemon (19), configuration (17), manage (17), compose (15), log (14), drivers (14), copying (14), storage (14), your (13), release (13), options (12), support (12), true (12), security (12), images (12), local (11), configure (11), faqs (11), create (11), notes (11), scout (11), settings (10), network (10), splunk (10), false (10), containers (10), remote (10), core (10), access (10), cli (10), usage (10), service (9), can (9), read (9), desktop (9), how (9), v17 (9), disable (8), plugin (8), new (8), troubleshoot (8), extension (8), mode (8), capability (7), overview (7), default (7), using (7), json (7), disabled (7), settimeout (7), 2000 (7), files (7), 2019 (7), 04t19 (7), info (7), start (7), management (7), reference (7), deploy (7), feedback (7), variables (7), content (7), started (7), trust (7), v18 (7), from (6), reading (6), customize (6), step (6), examples (6), registry (6), migrate (6), quickstart (6), get (6), bake (6), this (5), these (5), that (5), maximum (5), before (5), enabled (5), listeners (5), 423z (5), open (5), metrics (5), hardened (5), setup (5), add (5), account (5), subscription (5), best (5), practices (5), extensions (5), github (5), data (5), environment (5), builds (5), attestations (5), gordon (5), model (5), plugins (5), limitations (4), without (4), down (4), write (4), has (4), caching (4), when (4), per (4), defaults (4), set (4), run (4), command (4), configured (4), you (4), store (4), change (4), billing (4), platform (4), features (4), integration (4), guides (4), multi (4), marketplace (4), code (4), integrations (4), tos (4), install (4), repository (4), beta (4), networking (4), concepts (4), migration (4), agent (4), mcp (4), profiles (4), secrets (4), exporters (4), nodes (4), thread (4), prerequisites (3), used (3), shut (3), permissions (3), such (3), option (3), journald (3), opts (3), cat (3), etc (3), following (3), uses (3), debugging (3), enable (3), compression (3), rpc (3), name (3), running (3), claude (3), docs (3), copy (3), manuals (3), advanced (3), custom (3), roles (3), sign (3), general (3), insights (3), products (3), information (3), authentication (3), accounts (3), deprecated (3), cloud (3), api (3), continuous (3), sdk (3), binaries (3), kubernetes (3), architecture (3), publish (3), share (3), labels (3), source (3), actions (3), azure (3), amazon (3), registries (3), policy (3), explore (3), optimize (3), export (3), push (3), software (3), tags (3), search (3), hub (3), give (3), windows (3), mac (3), gpu (3), debian (3), ubuntu (3), chart (3), experimental (3), dmr (3), troubleshooting (3), toolkit (3), building (3), services (3), multiple (3), introduction (3), dockerfile (3), buildkit (3), functions (3), contexts (3), key (3), status (2), llms (2), full (2), txt (2), about (2), table (2), contents (2), page (2), admin (2), fails (2), system (2), removed (2), isn (2), disabling (2), note (2), example (2), are (2), through (2), there (2), rotated (2), boolean (2), value (2), passed (2), string (2), positive (2), integer (2), max (2), size (2), description (2), rotation (2), limited (2), each (2), 599z (2), cluster (2), successfully (2), forwarding (2), pre (2), 7d6ac83a89a0 (2), busybox (2), testlog (2), top (2), doesn (2), error (2), not (2), automatically (2), section (2), markdown (2), organization (2), tokens (2), namespace (2), isolation (2), enforce (2), provision (2), mapping (2), user (2), providers (2), domains (2), installer (2), deactivate (2), enterprise (2), scale (2), two (2), history (2), update (2), lifecycle (2), testcontainers (2), backend (2), dashboard (2), test (2), developer (2), tools (2), socket (2), host (2), design (2), metadata (2), arch (2), part (2), process (2), non (2), environments (2), quality (2), view (2), evaluate (2), policies (2), collection (2), artifact (2), types (2), sboms (2), exception (2), vex (2), delete (2), repositories (2), program (2), trusted (2), automated (2), mirror (2), library (2), builder (2), uninstall (2), releases (2), linux (2), restore (2), wsl (2), containerd (2), capabilities (2), resource (2), volumes (2), rhel (2), fedora (2), permission (2), requirements (2), resources (2), slsa (2), provenance (2), select (2), verify (2), node (2), testing (2), models (2), engines (2), runner (2), templates (2), agents (2), sandboxes (2), server (2), catalog (2), bridge (2), oci (2), legacy (2), works (2), opentelemetry (2), annotations (2), validation (2), between (2), workflow (2), checks (2), targets (2), builders (2), device (2), v26 (2), protect (2), work (2), certificates (2), format (2), output (2), proxy (2), mounts (2), answers (2), documentation (2), questions (2), helpful (2), assistant (2), copyright, 2013, 2026, inc, all, rights, reserved, legal, terms, cookies, pricing, product, offerings, request, changes, edit, some, might, lost, because, ring, buffer, prevent, blocking, stdio, case, slow, writes, must, repair, while, any, reason, logged, entry, retried, logdriver, sends, remotely, issue, occurs, effect, individual, useful, save, space, situations, where, only, need, purposes, compress, number, present, rotating, creates, excess, oldest, plus, modifier, representing, unit, measure, 20m, 20mb, described, below, accepts, same, but, prefix, specified, difference, functionality, after, became, available, both, scenarios, stopped, shutting, stopping, seal, teardown, starting, marked, sealed, even, shows, response, does, displayed, attempting, locally, show, result, availability, enables, refer, feature, regardless, act, latest, called, ask, home, air, gapped, reporting, console, eci, enhanced, auto, just, time, group, scim, identity, enforcement, connections, single, microsoft, dev, box, jamf, pro, intune, pkg, msi, activity, users, owners, organizations, company, teams, members, convert, onboard, administration, license, agreement, seats, compare, announcements, recover, factor, personal, submit, tax, exemption, certificate, cycle, invoices, secure, payment, method, navigation, apis, debug, invoke, interacting, mui, principles, guidelines, styling, package, validate, frontend, simple, one, private, slack, team, collaboration, sysdig, generic, integrating, jenkins, gitlab, circle, devops, pipelines, artifactory, ecr, sonarqube, remediation, compliance, health, scores, evaluation, advisory, database, sources, matching, deep, dive, different, gui, vulnerability, exceptions, details, exporter, analysis, pulls, limits, archive, analytics, sponsored, verified, publisher, official, autobuilds, tests, link, webhooks, bulk, move, artifacts, immutable, catalogs, optimization, offload, macos, app, damaged, dialog, known, issues, common, topics, diagnose, backup, maintenance, kernels, virtual, machine, manager, wasm, workloads, synchronized, shares, usb, pause, saver, allowlist, vdi, additional, stig, ssdlc, supply, chain, immutability, digests, hardening, glibc, musl, fips, distroless, cves, signing, cis, benchmark, dhi, scan, packages, helm, python, wolfi, alpine, assisted, checklist, malware, scanning, responsibility, scanner, privacy, cases, inference, webui, ide, tool, rest, faq, workspace, credentials, layers, kits, shell, opencode, kiro, gemini, droid, cursor, copilot, codex, early, e2b, gateway, dynamic, discovery, evals, rag, toolsets, acp, a2a, sharing, coding, provider, applications, production, include, extend, merge, watch, dependent, interpolation, defined, precedence, control, startup, order, hooks, specify, project, standalone, development, why, syntax, buildkitd, toml, tar, definitions, sbom, attestation, built, input, git, validating, jobs, reproducible, named, summary, inline, blob, backends, garbage, invalidation, definition, overriding, configurations, standard, matrix, expressions, inheritance, base, interface, cdi, stage, context, prior, v19, v20, v23, v24, v25, v27, v28, v29, config, version, volume, authorization, routing, mesh, configs, raft, consensus, networks, sensitive, lock, its, encryption, join, task, states, public, infrastructure, pki, drain, apply, rolling, updates, inspect, getting, stack, administer, maintain, client, seccomp, isolate, events, play, sandbox, keys, notary, delegations, automation, apparmor, antivirus, tips, rootless, syslog, graylog, extended, google, fluentd, etw, cloudwatch, prune, unused, objects, object, collect, prometheus, alternative, runtimes, live, ipv6, filter, commands, completion, runtime, constraints, processes, links, overlay, none, macvlan, ipvlan, port, publishing, packet, filtering, firewalls, nftables, iptables, zfs, windowsfilter, vfs, overlayfs, mapper, btrfs, tmpfs, bind, post, installation, steps, centos, raspberry, bit, armhf, back, generated, based, considers, current, viewing, provide, more, relevant, reached, better, answer, remaining, quite, was, org, try, asking, what, help, chat,

Text of the page (random words):
ing docker configs swarm mode key concepts use swarm mode routing mesh deprecated features docker engine plugins access authorization plugin docker log driver plugins docker network driver plugins docker plugin api docker volume plugins plugin config version 1 of plugin v2 use docker engine plugins release notes engine v29 engine v28 engine v27 engine v26 1 engine v26 0 engine v25 0 engine v24 0 engine v23 0 engine v20 10 engine v19 03 engine v18 09 engine v18 06 engine v18 05 engine v18 04 engine v18 03 engine v18 02 engine v18 01 engine v17 12 engine v17 11 engine v17 10 engine v17 09 engine v17 07 engine v17 06 engine v17 05 engine v17 04 engine v17 03 prior releases docker build core concepts docker build overview dockerfile overview build context build checks building multi stage variables secrets multi platform export binaries container device interface cdi best practices base images builders build drivers docker container driver docker driver kubernetes driver remote driver manage builders bake introduction targets inheritance variables expressions functions matrix targets contexts bake file reference bake standard library functions building with bake from a compose file overriding configurations remote bake file definition cache build cache invalidation build garbage collection cache storage backends amazon s3 cache azure blob storage cache github actions cache inline cache local cache registry cache optimize cache usage in builds ci github actions annotations attestations build checks build secrets build summary buildkit configuration cache management copy image between registries export to docker github builder new architecture build workflow bake workflow local registry multi platform image named contexts push to multiple registries reproducible builds share image between jobs tags and labels test before push update docker hub description validating builds experimental introduction usage image validation git validation templates examples testing debugging input reference built in functions metadata annotations build attestations image attestation storage provenance attestations sbom attestations slsa definitions exporters image and registry exporters local and tar exporters oci and docker exporters buildkit buildkitd toml configure buildkit custom dockerfile syntax dockerfile release notes debugging opentelemetry support build release notes docker compose introduction to compose how compose works why use compose history and development install plugin standalone legacy uninstall quickstart how tos specify a project name use lifecycle hooks use service profiles control startup order use environment variables set environment variables environment variables precedence pre defined environment variables interpolation best practices build dependent images use compose watch secrets in compose networking use multiple compose files merge extend include enable gpu support use compose in production oci artifact applications use provider services compose bridge usage customize use model runner compose sdk new trust model for compose files support and feedback faqs give feedback release notes testcontainers docker agent experimental model providers local models building a coding agent best practices sharing agents integrations a2a acp mcp reference configuration file toolsets cli examples rag evals ai overview mcp catalog and toolkit beta get started catalog profiles toolkit ui use with cli dynamic discovery gateway hub mcp server faqs e2b sandboxes docker sandboxes early access get started usage agents claude code codex copilot cursor droid gemini kiro opencode docker agent shell customize templates kits examples build an agent architecture security model isolation layers defaults credentials policies workspace trust troubleshooting faq model runner get started with dmr dmr rest api configuration options dmr examples ide and tool integrations open webui integration inference engines gordon beta use cases concepts capabilities data privacy how to guides docker desktop cli permissions configure tools ai and docker compose use ai models in compose products docker hardened images new quickstart features explore hardened images build process image types scanner integrations image testing responsibility overview malware scanning feedback migration migration checklist ai assisted migration experimental migrate from alpine or debian migrate from ubuntu migrate from wolfi migration examples go python node js how tos search and evaluate mirror a repository customize an image or chart create and build an image use an image use a helm chart use hardened packages verify an image or chart scan an image enforce image usage use the cli use dhi select enterprise core concepts attestations cis benchmark code signing cves distroless images fips glibc and musl hardening image digests image provenance immutability sboms slsa software supply chain security ssdlc stig vex troubleshoot additional resources docker desktop setup install mac mac permission requirements windows windows permission requirements linux ubuntu debian fedora arch rhel vm or vdi environments sign in allowlist explore docker desktop containers images volumes builds kubernetes logs beta resource saver mode pause docker desktop features and capabilities networking how tos gpu support usb ip support synchronized file shares containerd image store wasm workloads beta docker desktop cli virtual machine manager wsl best practices custom kernels use wsl settings and maintenance change settings backup and restore data troubleshoot and support troubleshoot and diagnose common topics known issues macos app damaged dialog faqs general mac windows linux releases give feedback uninstall release notes docker offload quickstart about configure usage optimize usage troubleshoot give feedback docker build cloud setup usage continuous integration optimization builder settings release notes docker hub quickstart library search trusted content catalogs mirror repositories create manage repository information access images tags immutable tags image management software artifacts push images move images bulk migrate images image security insights webhooks automated builds set up link accounts automated repository tests advanced options migrate manage autobuilds troubleshoot trusted content docker official images docker verified publisher program docker sponsored open source program insights and analytics export repositories archive delete settings usage and limits pulls optimize usage troubleshoot release notes docker scout install quickstart explore dashboard docker scout image analysis docker scout metrics exporter image details view manage vulnerability exceptions how tos create an exception using the gui create an exception using the vex docker scout environment variables docker scout sboms use scout with different artifact types deep dive advisory database sources and matching service data collection and storage in docker scout policy evaluation configure policies docker scout health scores evaluate policy compliance in ci remediation with docker scout view docker scout policy status integrations code quality sonarqube container registries amazon ecr artifactory container registry azure container registry continuous integration azure devops pipelines circle ci github actions gitlab ci cd jenkins integrating docker scout with environments generic cli sysdig source code management github team collaboration slack release notes cli release notes platform release notes docker extensions marketplace extensions non marketplace extensions configure a private marketplace settings and feedback extensions sdk the build and publish process quickstart part one build create a simple extension create an advanced frontend extension add a backend to your extension part two publish add labels validate package and release your extension share your extension publish in the marketplace build multi arch extensions architecture metadata security design and ui styling guidelines docker design principles mui best practices developer guides authentication interacting with kubernetes invoke host binaries use the docker socket developer sdk tools test and debug continuous integration ci cli reference extension apis dashboard docker extension backend extension ui api navigation testcontainers cloud deprecated products and features release lifecycle platform support billing add or update a payment method manage your billing information 3d secure authentication invoices and billing history change your billing cycle submit a tax exemption certificate faqs docker accounts accounts create an account manage an account deactivate an account security personal access tokens two factor authentication recover your docker account faqs general container network and vm security announcements subscription compare subscription set up your subscription scale your subscription manage seats change your subscription docker desktop license agreement faqs release notes enterprise administration organization setup create onboard change information convert account manage members teams docker products deactivate faqs company create manage organizations owners users faqs activity logs insights deploy docker desktop msi installer pkg installer ms store deploy with intune deploy with jamf pro microsoft dev box faqs security add and manage domains single sign on setup manage connections troubleshoot faqs general domains enforcement identity providers user management provision scim setup group mapping migrate just in time auto provision troubleshoot enforce sign in configure roles and permissions core roles custom roles hardened docker desktop enhanced container isolation enable eci configure advanced settings limitations faqs settings management use a json file use the admin console desktop settings reporting settings reference air gapped containers registry access management image access management namespace access organization access tokens home manuals docker engine logs and metrics use docker logs with remote logging drivers use docker logs with remote logging drivers copy as markdown open markdown ask docs ai claude open in claude table of contents overview prerequisites without dual logging capability with dual logging capability configuration options disable the dual logging cache limitations overview you can use the docker logs command to read container logs regardless of the configured logging driver or plugin docker engine uses the local logging driver to act as cache for reading the latest logs of your containers this is called dual logging by default the cache has log file rotation enabled and is limited to a maximum of 5 files of 20 mb each before compression per container refer to the configuration options section to customize these defaults or to the disable dual logging section to disable this feature prerequisites docker engine automatically enables dual logging if the configured logging driver doesn t support reading logs the following examples show the result of running a docker logs command with and without dual logging availability without dual logging capability when a container is configured with a remote logging driver such as splunk and dual logging is disabled an error is displayed when attempting to read container logs locally step 1 configure docker daemon s gm copying true settimeout copying false 2000 cat etc docker daemon json log driver splunk log opts cache disabled true options for splunk logging driver step 2 start the container s gm copying true settimeout copying false 2000 docker run d busybox name testlog top step 3 read the container logs s gm copying true settimeout copying false 2000 docker logs 7d6ac83a89a0 error response from daemon configured logging driver does not support reading with dual logging capability with the dual logging cache enabled the docker logs command can be used to read logs even if the logging driver doesn t support reading logs the following example shows a daemon configuration that uses the splunk remote logging driver as a default with dual logging caching enabled step 1 configure docker daemon s gm copying true settimeout copying false 2000 cat etc docker daemon json log driver splunk log opts options for splunk logging driver step 2 start the container s gm copying true settimeout copying false 2000 docker run d busybox name testlog top step 3 read the container logs s gm copying true settimeout copying false 2000 docker logs 7d6ac83a89a0 2019 02 04t19 48 15 423z info core marked as sealed 2019 02 04t19 48 15 423z info core pre seal teardown starting 2019 02 04t19 48 15 423z info core stopping cluster listeners 2019 02 04t19 48 15 423z info core shutting down forwarding rpc listeners 2019 02 04t19 48 15 423z info core forwarding rpc listeners stopped 2019 02 04t19 48 15 599z info core rpc listeners successfully shut down 2019 02 04t19 48 15 599z info core cluster listeners successfully shut down note for logging drivers that support reading logs such as the local json file and journald drivers there is no difference in functionality before or after the dual logging capability became available for these drivers logs can be read using docker logs in both scenarios configuration options the dual logging cache accepts the same configuration options as the local logging driver but with a cache prefix these options can be specified per container and defaults for new containers can be set using the daemon configuration file by default the cache has log file rotation enabled and is limited to a maximum of 5 files of 20mb each before compression per container use the configuration options described below to customize these defaults option default description cache disabled false disable local caching boolean value passed as a string true 1 0 or false cache max size 20m the maximum size of the cache before it is rotated a positive integer plus a modifier representing the unit of measure k m or g cache max file 5 the maximum number of cache files that can be present if rotating the logs creates excess files the oldest file is removed a positive integer cache compress true enable or disable compression of rotated log files boolean value passed as a string true 1 0 or false disable the dual logging cache use the cache disabled option to disable the dual logging cache disabling the cache can be useful to save storage space in situations where logs are only read through a remote logging system and if there is no need to read logs through docker logs for debugging purposes caching can be disabled for individual containers or by default for new containers when using the daemon configuration file the following example uses the daemon configuration file to use the splunk logging driver as a default with caching disabled s gm copying true settimeout copying false 2000 cat etc docker daemon json log driver splunk log opts cache disabled true options for splunk logging driver note for logging...