Docker containers will report the following real-time events: create, destroy, die, export, kill, omm, pause, restart, start, stop, and unpause. The following are a few examples that illustrate how to use these commands:

$ sudo docker pause  a245253db38b
a245253db38b

$ sudo docker ps -a
a245253db38b   training/webapp:latest    "python app.py"         
4 days ago     Up 4 days (Paused)       0.0.0.0:5000->5000/tcp sad_sammet

$ sudo docker unpause  a245253db38b
a245253db38b

$ sudo docker ps -a
a245253db38b        training/webapp:latest    "python app.py"         
4 days ago    Up 4 days        0.0.0.0:5000->5000/tcpsad_sammet  

The Docker image will also report the untag and delete events.

The usage of multiple filters will be handled as an AND operation; for example,

--filter container= a245253db38b --filter event=start will display events for the container a245253db38b and the event type is start.

Currently, the supported filters are container, event, and image.