What you're attacking is not how Docker logging works. The Docker daemon collects stdout/stderr from the beginning of each container's life, always, and stores

What you're attacking is not how Docker logging works. The Docker daemon collects stdout/stderr from the beginning of each container's life, always, and stores it locally. You can then ask the Docker API for all the log events from a particular container ID at any time. You would have one system that polls the Docker APIs on all your hosts and dumps the logs into the management system of your choice at some interval. Log events are not going to HTTP live, you are not making an HTTP request per entry, and the event will be captured whether or not the network is available at the moment.