ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 130 - DCA discussion

Report
Export

Your organization has a centralized logging solution, such as Sptunk.

Will this configure a Docker container to export container logs to the logging solution?

Solution. docker system events- -filter splunk

A.

Yes

Answers
A.

Yes

B.

No

Answers
B.

No

Suggested answer: B

Explanation:

The commanddocker system events --filter splunkwill not configure a Docker container to export container logs to the logging solution. The commanddocker system eventswill display real-time events from the Docker daemon, such as container creation, start, stop, etc. The--filteroption will filter the events by various criteria, such as type, label, name, etc. However, there is no filter forsplunk, and even if there was, it would only show the events related to Splunk, not the container logs. To configure a Docker container to export container logs to Splunk, you need to use the Splunk logging driver, which is a plugin that sends container logs to HTTP Event Collector in Splunk Enterprise and Splunk Cloud. You can use the--log-driverand--log-optoptions when creating or running a container to specify the Splunk logging driver and its options, such as the Splunk token, URL, source, sourcetype, index, etc. Alternatively, you can configure the Splunk logging driver as the default logging driver for the Docker daemon by setting thelog-driverandlog-optskeys in thedaemon.jsonfile and restarting Docker.Reference:

docker system events

Splunk logging driver

How to send Docker containers logs to Splunk?

asked 08/11/2024
Veronica Puddu
54 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first