logspout:
    image: gliderlabs/logspout:latest
    volumes:
      - "/var/run/docker.sock:/var/run/docker.sock:ro"
    command:
      - "syslog+udp://syslogng:514"
    depends_on:
      - syslogng
    networks:
      - logging
  syslogng:
    image: balabit/syslog-ng:3.19.1
    command: -F --no-caps
    #-edv
    volumes:
      - ./logs/:/var/log/syslogng/
      - ./syslogng/syslog-ng.conf:/etc/syslog-ng/syslog-ng.conf
    networks:
      - logging

@version: 3.19.1
@include "scl.conf"
source s_ucp {
  syslog(transport("udp") port(514));
};

template t_demo_filetemplate {
  template("$ISODATE $PROGRAM $MSGONLY\n");
  template_escape(no);
};

destination d_local {
  file("/var/log/syslogng/${PROGRAM}.${YEAR}.${MONTH}.${DAY}.log" template(t_demo_filetemplate));
};

options {
  create-dirs(yes);
  dir-perm(744);
  perm(644);
};

log {
  source(s_ucp);
  destination(d_local);
};