[viraptor]

I'm not sure I see the problem. At scale, you're logging into an aggregator anyway. If part of your job is log recovery/analysis then you need to get the right tools working (docker works almost everywhere now, so that should solve it). In a small environment, I'm you can find a way to run a VM somewhere temporarily.

[mises]

I was doing security on a VM image. I wasn't doing anything at scale, and wasn't doing the initial deployment. Log recovery/analysis wasn't the job, it was a necessary component thereof. Docker makes no sense when I'm doing OS-level hardening on a VM.