<p>I try to gather containers' logs that kubernetes produced and in /var/lib/containers the logs are as follow</p>
<pre><code>2023-04-09T10:54:20.639820293+03:30 stdout F &lt;service log&gt;
</code></pre>
<p>I don't know what is that F character after stdout does anybody know about that character?</p>

amir.m ghazanfari
<p>That's the <code>tags</code> field of the log line. Taken from the <a href="https://github.com/kubernetes/design-proposals-archive/blob/main/node/kubelet-cri-logging.md#proposed-solution" rel="nofollow noreferrer">docs</a></p>
<blockquote>
<p>The tags fields can support multiple tags, delimited by :. Currently, only one tag is defined in CRI to support multi-line log entries: partial or full. Partial (P) is used when a log entry is split into multiple lines by the runtime, and the entry has not ended yet. Full (F) indicates that the log entry is completed -- it is either a single-line entry, or this is the last line of the multiple-line entry.</p>
</blockquote>
<p>Hence, the <code>F</code> stands for full-line, where <code>P</code> stands for partial (multiline log event)</p>
