[systemd-devel] journald forwarding to rsyslogd. Huge (350 times) performance degradation. What am I doing wrong???

[Lennart Poettering]

On So, 20.09.20 16:09, Vitaly Repin (vitaly_repin at fsfe.org) wrote:

> Hello,
>
> Thanks for the answer!
>
> However, it looks like that imjournal module is not an option for me.
>
> rsyslog imjournal module documentation
> (https://www.rsyslog.com/doc/v8-stable/configuration/modules/imjournal.html)
> clearly recommends to use imuxsock module in my case:
>
> [begin quote]
> As such, the performance of a configuration utilizing this module may
> be notably slower than when using imuxsock.
> The journal provides imuxsock with a copy of all “classical” syslog
> messages, however, it does not provide structured data. '
> Only if that structured data is needed, imjournal must be used.
> Otherwise, imjournal may simply be replaced by imuxsock, and we highly
> suggest doing so.
> [end quote]
>
> I do not need structural data and I need performance. My system
> generates a substantial amount of logs. I want to be able to store
> messages with an arrival rate of 10 000 messages per second at
> least.

The rsyslog maintainer doesn't like systemd very much. Much of what he
puts in the docs as big fat warnings is quite a bit FUDdy.

Lennart

--
Lennart Poettering, Berlin