A sidecar is a secondary process that runs alongside a primary application to provide supporting functionality. In container deployments, a sidecar container commonly collects application logs, while the main container serves the application. section 11.5
A practical logging arrangement writes logs to standard output, then lets a sidecar agent collect and forward them through a log router to an aggregator for storage and analysis. This separates log handling from application work and supports API security investigation. section 11.5
Log collector beside an API
An API container emits request logs while a neighboring sidecar container captures them and sends them to centralized analysis. In Kubernetes, both containers run in the same pod. section 11.5
