Logging, Monitoring and Observing Containers: Logs, Metrics and Traces | Containers Ep 17

Containers come and go in seconds. When one dies, its logs can die with it, and so can your evidence. This lesson is about seeing what your containers are actually doing before, during and after something breaks. We open with dependency hell and why legacy VMs gave way to lightweight containers, then face the real challenge: ephemeral containers that get spun up and killed off constantly. You will learn how Docker logging drivers like JSON, syslog, Splunk, awslogs and journald route logs off the container, how to track CPU and memory with resource metrics, and how traces and spans complete the three pillars of observability. We finish with securing your telemetry, because if an attacker can wipe the logs, you will never know they were there. In this lesson you will learn: Why ephemeral containers make logging hard Docker logging drivers and centralized logs Container resource metrics and memory limits Spans, distributed traces and the three pillars of observability Externalizing and protecting logs from tampering Chapters: 0:00 Introduction: Monitoring Containers 0:36 Lesson roadmap 0:58 Section 1: Dependency hell 1:56 The matrix from hell 2:28 Legacy VMs vs containers 3:11 Section 2: Ephemeral containers, the challenge 3:59 What happens when the container disappears? 4:23 Logs that vanish with the container 5:06 Section 3: Routing logs with Docker logging drivers 5:59 Funneling logs to a central store 6:49 Section 4: Metrics and resource monitoring 7:46 Healthy vs frozen containers 8:30 Section 5: Traces, spans and observability pillars 9:25 Logs, distributed traces and metrics 10:15 Section 6: Securing telemetry 11:07 Externalizing logs to secure storage 11:49 Wrap up: If an attacker covers their tracks, will you know? This is episode 17 of the containers series. Watch the full playlist in order to build your container and Kubernetes skills from the ground up, and subscribe so you do not miss the next lesson. Cybersecurity Masterclass by Joshua Moses | CyberTrace Foundation.