Logstash does not support to read logs from multiple Docker containers

[talbehat (shubham jain)]

I have multiple docker containers in host.

For example :-

1. tomcat process docker container,
2. elasticsearch process docker container,
3. postgresql process docker container.

And Logstash are running in seperate docker container in same host.

How logstash will read logs from containers and use logstash-input-file plugins.

[Biswajit_naik]

i am using logstash version 7.4.3 and facing same issue with multiple docker container

[ashishtiwari1993 (Ashish Tiwari)]

HI @talbehat,

I am not sure you getting any specific error, But you can simply specify the container log path

path => "/var/lib/docker/*"

Also you can do same thing with Filebeat and Elastic Agent

Application Logs

If you want to ship application logs, Just mount the volume with your logstash and other containers.