[systemd-devel] journald forwarding to rsyslogd. Huge (350 times) performance degradation. What am I doing wrong???

[Lennart Poettering]

On So, 20.09.20 12:07, Vitaly Repin (vitaly_repin at fsfe.org) wrote:

> Any ideas are appreciated.

Note that you compare apples with oranges. journald spends much time
on collecting log metadata (i.e. process identity, user identity,
cgroup stuff, …), which the others simply don't.

That said, for starters, try running something a bit newer than a
version from 215. 5 years is an eternity in software.

The metadata colleciton code gained support for caching much of the
metadata, which makes a major difference in particular if you have
only a few log sources which log a lot (in contrast to many different
log sources that log at the same time).

Lennart

--
Lennart Poettering, Berlin