In our Windows VMs, we capture Elasticsearch logs (using log4jappender) and write to Windows event viewer (using ETW logger). Then logs from event viewer can be streamed to our monitoring service. What do folks use for capturing Elasticsearch logs in case of Linux docker instances?
I’d recommend using the fluentd logging driver (https://www.fluentd.org/guides/recipes/docker-logging). This will suck up all of your logs and output to the destination of your choice (and definitely elasticsearch!).
Thank you, i will have a look.