if $syslogtag contains 'docker/' then /var/log/docker.log
& ~