NOTE - this was specifically built for a docker instance, with the Filebeat docker module collecting the logs.