rsyslog/rsyslog-dockerlogs repository overview

⁠rsyslog/rsyslog-dockerlogs

rsyslog/rsyslog-dockerlogs is a forwarding role in the rsyslog container image family that reads Docker log events and ships them to a central collector.

⁠What it is for

Use this image when you want to:

• collect logs from the Docker daemon with imdocker
• forward container log events to a central rsyslog receiver
• run an edge-side log forwarder in Docker environments

⁠Default behavior

The image:

• reads Docker log events with imdocker
• forwards everything to a remote rsyslog collector over TCP
• uses an in-memory action queue with infinite retry
• does not store logs locally as its primary role

⁠Useful environment variables

• REMOTE_SERVER_NAME: required hostname or IP of the destination collector
• REMOTE_SERVER_PORT: TCP port on the collector, default 514
• RSYSLOG_HOSTNAME: sets the hostname used inside rsyslog
• PERMIT_UNCLEAN_START: skips startup config validation when set
• RSYSLOG_ROLE: entrypoint role selector, normally left as docker

⁠Notes

This image is designed to feed a central rsyslog collector, not to act as a standalone storage endpoint.

Documentation: https://www.rsyslog.com/doc/containers/dockerlogs.html⁠