# Centralised Logging Strategies

**URL:** <https://forums.suse.com/t/centralised-logging-strategies/2187>\
**Category:** Rancher 1.x\
**Created:** [March 28, 2016, 9:49am UTC](https://forums.suse.com/t/centralised-logging-strategies/2187 "2016-03-28T09:49:47Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![naartjie](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/naartjie/32/1104_2.png) [@naartjie](https://forums.suse.com/u/naartjie)\
**Post date:** [March 28, 2016, 9:49am UTC](https://forums.suse.com/t/centralised-logging-strategies/2187/1 "2016-03-28T09:49:47Z")

</div>

I wanted to get some ideas on what different approaches people are taking to logging in production.

Our docker containers are set up to log to stdout/stderr. My plan is to set `--log-driver` on every docker daemon on every host I deploy, and pump those logs to a centralised location.

For the log server I am considering options of either deploying our own ELK stack, or using a hosted one (logit, qbox), or possibly some other hosted options (loggly, logentries, papertrail).

I have not had experience using these, but I am assuming that the choice between the drivers (syslog / journald, gelf, fluentd, awslogs, splunk), is going to be largely driven by what log server I decide to go with, and use the one which is going to be easiest to integrate.

As an aside, I know it’s a small thing, but is there any way to get Rancher to set `--log-driver` to the same value for each one of my hosts, instead of doing this manually? So this is on the docker daemon lever, as opposed to setting it up per container. (I saw that this was [recently added](https://github.com/rancher/rancher/issues/2935) to container config in the UI, which is awesome!)

-Marcin

---

<div class="post-metadata">

**Author:** ![etlweather](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/etlweather/32/419_2.png) [@etlweather](https://forums.suse.com/u/etlweather)\
**Post date:** [March 28, 2016, 11:29pm UTC](https://forums.suse.com/t/centralised-logging-strategies/2187/2 "2016-03-28T23:29:22Z")

</div>

Some if it was covered there: [Monitoring - How are other Rancher users doing it](http://forums.suse.com/t/monitoring-how-are-other-rancher-users-doing-it)