Metadata

Id: dockercompose-logging-driver-disabled

Platform: DockerCompose

Severity: Medium

Category: Observability

Learn More

• Provider Reference

Description

Setting logging.driver: none disables all log collection for a container, preventing audit trails, alerting, and forensic analysis of container activity. Without logs, security incidents cannot be detected or investigated, and compliance requirements for activity logging cannot be met. Services should use a logging driver that forwards output to a log aggregation system rather than discarding it.

Compliant Code Examples

services:
  json_log:
    image: alpine
    logging:
      driver: json-file
      options:
        max-size: 10m
  no_logging:
    image: alpine

Non-Compliant Code Examples

services:
  silent:
    image: alpine
    logging:
      driver: none