2.2 Set the logging level

Information

Set Docker daemon log level to 'info'.

Rationale:

Setting up an appropriate log level, configures the Docker daemon to log events that you would want to review later. A base log level of 'info' and above would capture all logs except debug logs. Until and unless required, you should not run Docker daemon at 'debug' log level.

Solution

Run the Docker daemon as below:

dockerd --log-level="info"

Impact:

None.

Default Value:

By default, Docker daemon is set to log level of 'info'.

See Also

https://workbench.cisecurity.org/files/1476

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-3

Plugin: Unix

Control ID: 18330a761cb7c2f5ea34065fcaa843e5f2b61b33c2cf5dd7e19a26bc4a34996d