Log Monitor is a Microsoft console utility for Windows containers. It reads configured application logs from files, Event Log, and Event Tracing for Windows, then writes them to standard output so Docker can collect them as container logs. section 13.2
Use Log Monitor when a Windows application does not naturally write logs to the container output stream:
- Wrap the application process with Log Monitor and configure its log sources. section 13.2
- Forward file, Event Log, and ETW entries to standard output for Docker. section 13.2
- Combine it with Service Monitor when the application runs as a Windows Service. section 13.2
Legacy IIS application
An IIS web application can continue writing logs to files while Log Monitor exposes those entries as ordinary Docker container logs, avoiding an application rewrite. section 13.2
