docker => syslog (RFC5424, non-transparent) => telegraf => (*)
Docker can use syslog as a log driver.
Anyway it transport syslog message towards destination using the non-transparent framing technique (also if deprecated by the octet-counting).
Using the telegraf syslog input plugin link.