title: ECS logging (awslogs driver) only logging apache server startup logs to cloudwatch, no error.log & no access.log
body: <p>I have the problem that my ECS logs (awslogs driver) are not working as expected. In Cloudwatch I'm only seeing the server startup logs &amp; not the useful logs from the apache (<code>/var/log/apache2/error.log</code> &amp; <code>/var/log/apache2/access.log</code>) </p>
  
  <p>I have a docker multicontainer setup with one container running the apache server &amp; the other container running PHP-FPM. My container logs on cloudwatch look like this:</p>
  
  <p>Apache-Container:</p>
  
  <pre><code>23:35:39 *** Running /etc/my_init.d/02_init.sh...
  23:35:39 Starting Apache
  23:35:39 * Starting Apache httpd web server apache2
  23:35:39 /usr/sbin/apache2ctl: 87: ulimit: error setting limit (Operation not permitted)
  23:35:39 Setting ulimit failed. See README.Debian for more information.
  23:35:40 *** Running /etc/rc.local...
  23:35:40 *** Booting runit daemon...
  23:35:40 *** Runit started as PID 225
  23:35:40 Oct 25 22:35:40 apache-container syslog-ng[231]: syslog-ng starting up; version='3.5.6'
  2019-10-26 00:17:01
  Oct 25 23:17:01 apache-container CRON[947]: (root) CMD ( cd / &amp;&amp; run-parts --report /etc/cron.hourly)
  ...
  07:35:16 tail: '/var/log/syslog' has been replaced; following new file
  ...
  </code></pre>
  
  <p>FPM-Container:</p>
  
  <pre><code>...
  10:25:23 172.x.x.x - 27/Okt/2019:09:25:23 +0000 "GET /app.php" 200
  10:25:25 172.x.x.x - 27/Okt/2019:09:25:24 +0000 "GET /app.php" 200
  ...
  </code></pre>
  
  <p>I've checked various forums &amp; online resources. As I understood it right I just need to symlink my logs to STDOUT/STDERR or even better to <code>/proc/self/fd/1</code> &amp; <code>/proc/self/fd/2</code>  like this:</p>
  
  <pre><code>ln -sf /dev/stdout /var/log/apache2/access.log
  ln -sf /dev/stderr /var/log/apache2/error.log
  </code></pre>
  
  <p>I've tried to link the logs in my <code>.Dockerfile</code> via the <code>RUN</code> command &amp; also during runtime, but no success. I see that my logs are showing up correctly in the log files before linking them. I've also tried things like <code>echo "test stderr logs" &gt;&gt; /dev/stderr</code> or <code>echo "test stdout logs" &gt;&gt; /dev/stdout</code> inside &amp; outside the containers, but nothing showing up in the cloudwatch logs. When I try <code>docker logs MY_DOCKER_CONTAINER_ID</code> I get: <code>Error response from daemon: configured logging driver does not support reading</code>.</p>
  
  <p>Maybe I'm missing some basic knowledge here. I see that <code>syslog</code> is in my environment/base image (maybe i need to merge syslog &amp; apache logs?) and that the PHP-FPM-container is logging 200's but only to the <code>app.php</code> even though I would like to know the exact path of the accessed url. </p>