216

Is there any way I can see the log of a container that has exited?

I can get the container id of the exited container using docker ps -a but I want to know what happened when it was running.

1

5 Answers 5

230

Use docker logs. It also works for stopped containers and captures the entire STDOUT and STDERR streams of the container's main process:

$ docker run -d --name test debian echo "Hello World"
02a279c37d5533ecde76976d7f9d1ca986b5e3ec03fac31a38e3dbed5ea65def

$ docker ps -a
CONTAINER ID    IMAGE     COMMAND        CREATED             STATUS                     PORTS               NAMES
49daa9d41a24    debian    "echo test"    2 minutes ago       Exited (0) 2 minutes ago                       test

$ docker logs -t test
2016-04-16T15:47:58.988748693Z Hello World
3
  • 7
    For a docker stack where it restarts every few seconds: stack=s1 && c=$(task_id=$(docker stack ps "$stack" --filter desired-state=shutdown | tail -n +2 | head -n 1 | awk '{print $1}') && docker inspect --format '{{.Status.ContainerStatus.ContainerID}}' "$task_id") && docker logs "$c" Stack name is specified at the beginning of the command.
    – x-yuri
    Commented Dec 13, 2018 at 17:55
  • 3
    How would it work (IF it would) for a container that was started using the --rm flag? Is that possible?
    – M.Ionut
    Commented Jan 19, 2022 at 18:28
  • @M.Ionut Right - does not work - that is a disadvantage of --rm. My robot keeps blowing up a detached ROS Docker container, which I launch with --rm so I cannot see the log. Commented Sep 3 at 19:00
56

docker logs --tail=50 <container id> for the last fifty lines - useful when your container has been running for a long time.

1
  • 1
    @Whitefret, I've updated the answer with your suggestion. The original answer would pull the entire log down and tail it locally, would have taken a very long time with a big log and a slow network
    – Matt
    Commented Apr 19, 2018 at 9:16
23

You can use below command to copy logs even from an exited container :

docker cp container_name:path_of_file_in_container destination_path_locally

Eg:

docker cp sample_container:/tmp/report /root/mylog
1
  • 1
    I could use this to copy NPM debug logs out from a Python/Debian container that had stopped - the logs I was looking for weren't shown in the usual logs of Docker and were instead in the file system of Debian. Commented May 21, 2021 at 14:59
13

@icyerasor comment above actually helped me solve the issue. In my particular situation the container that has stopped running had no container name only container id.

Steps that found the logs also listed in this post

  1. Find the stopped container via docker ps -a
  2. grab the container id of the failed container
  3. Substitute it in this command cat /var/lib/docker/containers/<container id>/<container id>-json.log

Container ID should be like e03ef95c49e6686408b6033ed60b3e1e943e9115d78f51f546ecc921822454a6 and not like e03ef95c49e6

1
  • 2
    It works, you just have to insert full container id into the command, not the ending. Because it's a folder name, and a file name. Close match won't work. I got my traceback. Commented Sep 4, 2021 at 23:07
11

To directly view the logfile of an exited container in less, scrolled to the end of the file, I use:

docker inspect $1 | grep 'LogPath' | sed -n "s/^.*\(\/var.*\)\",$/\1/p" | xargs sudo less +G

run as ./viewLogs.sh CONTAINERNAME

This method has the benefit over docker logs based approaches, that the file is directly opened, instead of streamed.

sudo is necessary, as the LogPath/File usually is under root-owned

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.