server: 1.2.3.4
port: 514/dup

docker rm -f logspout
docker run \
  -d \
  --name=logspout \
  --restart=always \
  -v /var/run/docker.sock:/var/run/docker.sock \
  -v /etc/localtime:/etc/localtime \
  -p 10080:80 \
  -e RAW_FORMAT="{{.Data}}" \
  gliderlabs/logspout \
  syslog+udp://1.2.3.4:514
docker logs -f logspout

refer: https://github.com/gliderlabs/logspout