Docker containers will report the following real-time events: create, destroy, die, export, kill, omm, pause, restart, start, stop, and unpause. The following are a few examples that illustrate how to use these commands:
$ sudo docker pause a245253db38b
a245253db38b
$ sudo docker ps -a
a245253db38b training/webapp:latest "python app.py"
4 days ago Up 4 days (Paused) 0.0.0.0:5000->5000/tcp sad_sammet
$ sudo docker unpause a245253db38b
a245253db38b
$ sudo docker ps -a
a245253db38b training/webapp:latest "python app.py"
4 days ago Up 4 days 0.0.0.0:5000->5000/tcpsad_sammet
The Docker image will also report the untag and delete events.
The usage of multiple filters will be handled as an AND operation; for example,
--filter container= a245253db38b --filter event=start will display events for the container a245253db38b...