Introduction
Dozzle is a minimalist web UI that connects directly to the Docker socket to stream container logs in real time. While it lacks the extensive management suites of Portainer, Komodor, or Cockpit, its focus on log visibility makes it an essential addition to any Docker management stack.
Key Features of Dozzle
- Color‑coded streams for STDOUT, STDERR and other log levels
- Live view of operational, stopped, or failed containers
- Per‑container CPU, RAM and network metrics
- Support for multiple Docker hosts via agents or TCP
- Built‑in regex and SQL‑like filtering
Viewing and Managing Logs
Dozzle presents each container’s output in a clean, scrollable pane. Users can pin logs side‑by‑side, inspect raw JSON payloads, and switch between containers without opening new tabs. By default only running containers are shown, but a simple toggle reveals stopped or broken instances.
Advanced Filtering and Search
When dealing with thousands of entries, Dozzle’s filtering tools become indispensable:
- Regex search – find patterns across all logs, similar to a fuzzy finder.
- Stream filters – isolate STDERR for error‑only views or STDOUT for normal output.
- SQL engine – write declarative queries (e.g.,
SELECT * FROM logs WHERE message LIKE '%token%') to pinpoint exact entries.
Multi‑Node Monitoring
Dozzle can aggregate logs from several Docker hosts into a single dashboard. The recommended approach is the “agent” mode, where a lightweight container runs on each remote node and forwards logs to the primary Dozzle instance. This eliminates the need for multiple UI windows and centralizes troubleshooting.
Simple Deployment Options
For a single host, launch Dozzle with one command:
docker run -d -v /var/run/docker.sock:/var/run/docker.sock -p 8080:8080 amir20/dozzle:latest
To enable remote agents, start the agent container on each secondary node:
docker run -d -v /var/run/docker.sock:/var/run/docker.sock -p 7007:7007 amir20/dozzle:latest agent
When using Docker Compose, set the DOZZLE_REMOTE_AGENT environment variable in the main service to automatically discover agents.
Integrations with Other Tools
Dozzle works well alongside monitoring stacks such as Pulse, Gotify, or Prometheus. For example, a Gotify alert can provide a timestamp that you feed into Dozzle’s filters to locate the exact log entries surrounding an outage.
Conclusion
Although Dozzle is intentionally lightweight, its real‑time log streaming, powerful filtering, and multi‑node capabilities make it a powerful ally for Docker administrators who need fast, clear insight into container behavior without the overhead of full‑scale management platforms.