Details

https://docs.docker.com/engine/admin/logging/overview/

Solution

Step 1- Setup the desired log driver by following its documentation.Step 2- Start the docker daemon with that logging driver.For example,dockerd –log-driver=syslog –log-opt syslog-address=tcp-//192.xxx.xxx.xxxImpact-None.Default Value-By default, container logs are maintained as json files

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/517

This security hardening control applies to the following category of controls within NIST 800-53: Audit and Accountability.This control applies to the following type of system Unix.

References

• 800-53|AU-9(2)

Source

• Tenable.com/audits