Ideas from @Majavah :
10:08:40 <@taavi> ori: I wonder if one could update role::beta::docker_services to send everything from /var/lib/docker/containers/*/*-json.log to rsyslog 10:08:56 <@taavi> or configure docker to send logs to rsyslog directly https://docs.docker.com/config/containers/logging/configure/