Docker logs, stderr

Question

Is it possible to separate docker logs between stderr \ stdout? Via fluentd\logstash etc. The ultimate goal - sending logs to elasticsearch and filter it by stderr\stdout

Answer 1

If you want to separate docker logs into stdout processing and stderr processing in fluentd side, you can use rewite-tag-filter plugin with source value.

http://docs.fluentd.org/articles/out_rewrite_tag_filter