rsyslog/rsyslog-dockerlogs¶

The rsyslog/rsyslog-dockerlogs image reads Docker log events with imdocker and forwards them to a central rsyslog collector over TCP.

This variant includes the imdocker module to read logs from the Docker daemon and forward them to a central rsyslog instance. The packaged configuration uses omfwd over TCP with an in-memory queue and infinite retry so temporary collector outages do not immediately drop events.

The packaged dockerlogs image still runs as root by default. Typical deployments rely on Docker daemon or socket access, which is commonly root-scoped.

Environment Variables¶

REMOTE_SERVER_NAME¶: Required hostname or IP of the collector to forward logs to.

REMOTE_SERVER_PORT¶: TCP port on the collector. Defaults to 514 when unset.

RSYSLOG_HOSTNAME: Hostname used inside rsyslog. Defaults to the value of /etc/hostname when unset.

PERMIT_UNCLEAN_START: Skip configuration validation when set. By default rsyslogd -N1 validates the configuration.

RSYSLOG_ROLE: Role name consumed by the entrypoint. Defaults to docker.

Support: rsyslog Assistant | GitHub Discussions | GitHub Issues: rsyslog source project

Contributing: Source & docs: rsyslog source project