docker container logs using rsyslog & journald

etc_docker_daemon.json

{ "log-driver": "journald", "log-opts": {"tag": "{{.Name}}/{{.ID}}"}}

etc_rsyslog_conf_docker_containers_journald.conf

module(load="mmjsonparse")

template(
  name="json_docker"
  type="list"
  option.casesensitive="on"
) {
    constant(value="{")
      constant(value="\"@timestamp\":\"")        property(name="timereported" dateFormat="rfc3339" date.inUTC="on")
      constant(value="\",\"hostname\":\"")           property(name="hostname")
      constant(value="\",\"container_id\":\"")   property(name="$!CONTAINER_ID")
      constant(value="\",\"container_name\":\"") property(name="$!CONTAINER_NAME")
      constant(value="\",\"container_tag\":\"")  property(name="$!CONTAINER_TAG")
      constant(value="\",")                      property(name="$!json" position.from="2")
    constant(value="\n")
}

template(
  name="string_docker"
  type="list"
  option.casesensitive="on"
) {
    constant(value="{")
      constant(value="\"@timestamp\":\"")        property(name="timereported" dateFormat="rfc3339" date.inUTC="on")
      constant(value="\",\"hostname\":\"")           property(name="hostname")
      constant(value="\",\"container_id\":\"")   property(name="$!CONTAINER_ID")
      constant(value="\",\"container_name\":\"") property(name="$!CONTAINER_NAME")
      constant(value="\",\"container_tag\":\"")  property(name="$!CONTAINER_TAG")
      constant(value="\",\"msg\":\"")            property(name="rawmsg")
    constant(value="\"}\n")
}


template(
  name="docker_container_file"
  type="string"
  string="/var/log/docker/%$!CONTAINER_TAG%.log"
  option.casesensitive="on"
)

if ($!CONTAINER_NAME != "") then {
  action(type="mmjsonparse" cookie="" container="!json")
  if ($parsesuccess == "OK") then {
    unset $!json!@timestamp;
    unset $!json!hostname;
    unset $!json!container_id;
    unset $!json!container_name;
    unset $!json!container_tag;
    action(name="docker-containers-combined" type="omfile" file="/var/log/docker_combined.log" template="json_docker")
    action(name="docker-containers" type="omfile" dynaFile="docker_container_file" template="json_docker")
  } else {
    action(name="docker-containers-combined" type="omfile" file="/var/log/docker_combined.log" template="string_docker")
    action(name="docker-containers" type="omfile" dynaFile="docker_container_file" template="string_docker")
  }
  stop
}

I needed the following module loading to automatically load from journald

module(load="imjournal" StateFile="imjournal.state")