Monitoring is in 2 steps. Client side and Monitoring central side.
Client has deployed log gatherer, log shipper (with log transforming), log storing (database).
Logs will be gathered from the containers unix:///var/run/docker.sock and transformed before shipping to database where they will be pushed (made available)
Monitoring central will pull the available transformed logs and stores them in database for visualization and alerts
As a Participant I WANT to be able to monitor the running application So that I can plan accordingly