What is the best way to get DCOS Mesos/Marathon to forward their containers logging into Splunk?

[splunk_zen]

What would be the best way to get DCOS Mesos/Marathon to forward their containers logging to Splunk?

As our Devs told me,
"Docker’s runtime (excluding Docker Images) is already deprecated and we are going to get rid of the Docker daemon with time. Therefore when working with logging we should focus only on what DCOS & Mesos provide"

Being Mesos just a way to orchestrate Docker clusters
I'm looking for a way to achieve the same as Docker's logging driver into Splunk's HTTP event Collector

[mmcginnis2]

DC/OS has a really good write up on how to configure logging from their platform into Splunk. The write up includes all of the services that can be pulled out of journald and brought into splunk. It also includes commands to create the input stanza.

Link: https://dcos.io/docs/1.10/monitoring/logging/aggregating/splunk/

[splunk_zen]

The ingestion part was never an issue but rather the parsing one, which wasn't particularly well documented in 2016
https://docs.mesosphere.com/1.10/monitoring/logging/aggregating/filter-splunk/