2.2 Ensure the logging level is set to 'info'

Information

Set Docker daemon log level to info.
Rationale:
Setting up an appropriate log level, configures the Docker daemon to log events that you would want to review later. A base log level of info and above would capture all logs except debug logs. Until and unless required, you should not run Docker daemon at debug log level.

Solution

Run the Docker daemon as below:
dockerd --log-level="info"
Impact:
None.
Default Value:
By default, Docker daemon is set to log level of info.

See Also

https://workbench.cisecurity.org/files/1726

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-3, CSCv6|6.2

Plugin: Unix

Control ID: 49034ea3ccfef10a55891a4d4d6e4e9f98b89baa2e2fa68549b983e023494c21