title: Fluentd Reading Logs Process K8s
body: <p>I have a Qs pertaining to how fluentd's process of reading containers' logs looks like in K8s.</p>
  <p><code>/var/lib/docker/container/*</code> is mounted into the fluentd containers of the DaemonSet to give fluentd access to the logs of all the cluster's containers. So this is the location where the logs can be read from.</p>
  <p>My confusion stems from the <code>path</code> argument of the <code>in_tail</code> plugin. In the <a href="https://docs.fluentd.org/input/tail#path" rel="nofollow noreferrer">docs</a> it says for this argument --&gt; <code>The path(s) to read. Multiple paths can be specified, separated by comma ','.</code></p>
  <p>My questions:</p>
  <ol>
  <li>Why does Fluentd read logs from <code>path</code> specified in <code>in_tail</code> and not directly from <code>/var/lib/docker/containers/*</code>.</li>
  <li>What puts the logs from <code>/var/lib/docker/containers/*</code> into <code>path</code> from <code>in_tail</code>?</li>
  </ol>
  <p>I coudln't find this explained anywhere and would be very happy if someone could help me out.</p>
  <p>Yours
  Tridelt</p>