# "docker" or "log" input/prospector for Docker JSON logs? **URL:** \ **Category:** Beats\ **Tags:** filebeat\ **Created:** [May 10, 2018, 5:57pm UTC](https://discuss.elastic.co/t/docker-or-log-input-prospector-for-docker-json-logs/131339 "2018-05-10T17:57:18Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![LollerAgent](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/lolleragent/32/47486_2.png) [@LollerAgent](https://discuss.elastic.co/u/LollerAgent)\ **Post date:** [May 10, 2018, 5:57pm UTC](https://discuss.elastic.co/t/docker-or-log-input-prospector-for-docker-json-logs/131339/1 "2018-05-10T17:57:18Z")
We currently use the "logs" prospector to collect JSON logs that Docker outputs. I just recently noticed there is now a native "docker" input [1]. What are the benefits of using this over the "logs" prospector? [1] [https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-input-docker.html](https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-input-docker.html) ---
**Author:** ![ruflin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ruflin/32/3116_2.png) [@ruflin](https://discuss.elastic.co/u/ruflin)\ **Post date:** [May 11, 2018, 6:57am UTC](https://discuss.elastic.co/t/docker-or-log-input-prospector-for-docker-json-logs/131339/2 "2018-05-11T06:57:37Z")
The main advantage if the docker prospector over the log prospector is that it already works out of the box and the settings to make the log prospector work with the docker files are already set. An other advantage is that it allows us to make docker specific tweaks to it on the code side. A good example that happened recently is the detection of the multiline events in the docker log (coming from docker). As this is something we do on the code side and is specific to docker logs, it will only be in the docker prospector. So in general if you consume docker logs, I would recommend to use the docker prospector. ---
**Author:** ![LollerAgent](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/lolleragent/32/47486_2.png) [@LollerAgent](https://discuss.elastic.co/u/LollerAgent)\ **Post date:** [May 14, 2018, 3:39pm UTC](https://discuss.elastic.co/t/docker-or-log-input-prospector-for-docker-json-logs/131339/3 "2018-05-14T15:39:08Z")
The "docker" prospector is not yet available (in 6.2.4), correct? If not - do you have any idea when it will be released? ---
**Author:** ![ruflin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ruflin/32/3116_2.png) [@ruflin](https://discuss.elastic.co/u/ruflin)\ **Post date:** [May 15, 2018, 12:35pm UTC](https://discuss.elastic.co/t/docker-or-log-input-prospector-for-docker-json-logs/131339/4 "2018-05-15T12:35:54Z")
The docker prospector should already be in 6.2: [https://www.elastic.co/guide/en/beats/filebeat/current/configuration-filebeat-options.html](https://www.elastic.co/guide/en/beats/filebeat/current/configuration-filebeat-options.html) Some of the features mentioned above like mutiline are not in 6.2 yet. ---
**Author:** ![LollerAgent](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/lolleragent/32/47486_2.png) [@LollerAgent](https://discuss.elastic.co/u/LollerAgent)\ **Post date:** [May 15, 2018, 2:45pm UTC](https://discuss.elastic.co/t/docker-or-log-input-prospector-for-docker-json-logs/131339/5 "2018-05-15T14:45:05Z")
The docker "input" [1] is not available in 6.2.4, though, correct? Are "inputs" just a terminology change from "prospectors"? [1] [https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-input-docker.html](https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-input-docker.html) ---
**Author:** ![ruflin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ruflin/32/3116_2.png) [@ruflin](https://discuss.elastic.co/u/ruflin)\ **Post date:** [May 16, 2018, 12:12pm UTC](https://discuss.elastic.co/t/docker-or-log-input-prospector-for-docker-json-logs/131339/6 "2018-05-16T12:12:29Z")
Yes, input is just a termonology change. In the config you can still use both. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [June 13, 2018, 12:12pm UTC](https://discuss.elastic.co/t/docker-or-log-input-prospector-for-docker-json-logs/131339/7 "2018-06-13T12:12:39Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.