append messages to log

[drexlma]

not override the log

[t3chn0m4g3]

Thanks for the PR. However overwriting the log is intentional as it will be rotated by logrotate before being overwritten.

[drexlma]

and if the container crashes? Or is the PC restarted? Or is Docker updated?

then the log is emptied.

[t3chn0m4g3]

Yes, you are correct, those cases are not covered. At that point, the data would have been ingested into ES already.
For my better understanding (and not to annoy you, by any means 😅), are the logs outside of ES of greater value? If yes, I am happy to merge and also will look into updating logging for the other honeypots accordingly (if not already implemented).

[github-actions]

This pull request has been marked as stale because it has had no activity for 7 days. If you are still working on this, please comment or it will be closed in 7 days.