diff --git a/install_config/aggregate_logging.adoc b/install_config/aggregate_logging.adoc
index 68fe48b0b430..64387547bdf9 100644
--- a/install_config/aggregate_logging.adoc
+++ b/install_config/aggregate_logging.adoc
@@ -43,7 +43,7 @@ for projects they have permission to view. The stack components communicate
 securely.
 
 Aggregated logging is supported using the `json-file` or `journald` driver in Docker. 
-The Docker log driver is set to `journald` as the default for all nodes. See
+The Docker log driver is set to `json-file` as the default for all nodes. See
 xref:fluentd-upgrade-source[Updating Fluentd's Log Source After a Docker Log
 Driver Update] for more information about switching between `json-file` and `journald`.
 Fluentd automatically determines which log driver (`journald` or `json-file`) the container runtime is using. 
@@ -1819,7 +1819,7 @@ $ curl --key /etc/elasticsearch/secret/admin-key \
 [[fluentd-update-source]]
 == Changing the Aggregated Logging Driver
 
-By default, aggregated logging uses the `journald` log driver 
+By default, aggregated logging uses the `json-file` log driver 
 xref:../install_config/install/advanced_install.adoc#configuring-host-variables[unless `json-file` was specified during installation]. You can change the log driver between `journald` and `json-file` as needed.
 
 [IMPORTANT]
diff --git a/install_config/install/advanced_install.adoc b/install_config/install/advanced_install.adoc
index 2949b61f3e63..cb949d456890 100644
--- a/install_config/install/advanced_install.adoc
+++ b/install_config/install/advanced_install.adoc
@@ -466,7 +466,7 @@ which may cause invalid configurations. Example usage:
 a|This variable configures additional `docker` options within
 *_/etc/sysconfig/docker_*, such as options used in
 xref:../../install_config/install/host_preparation.adoc#managing-docker-container-logs[Managing Container Logs]. 
-Use `json-file` or `journald`. The default is `journald`. 
+Use `json-file` or `journald`. The default is `json-file`. 
 Example usage: 
 ----
 "--log-driver json-file --log-opt max-size=1M --log-opt max-file=3"