Details

https://docs.docker.com/engine/admin/logging/overview/

Solution

Step 1- Setup the desired log driver by following its documentation.
Step 2- Start the docker daemon with that logging driver.
For example,
docker run –log-driver=syslog –log-opt syslog-address=tcp-//192.xxx.xxx.xxx

Impact-
None.
Default Value-
By default, container logs are maintained as json files

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/516

This security hardening control applies to the following category of controls within NIST 800-53: Audit and Accountability.This control applies to the following type of system Unix.

References

• 800-53|AU-9(2)

Source

• Tenable.com/audits