Hm, some performance penalty is certainly expected but 350times slower looks like something is odd. Would be interesting to know, if you can reproduce the performance issue with a more recent version. Afaik, using imuxsock and syslog forwarding should be more performant then imjournal (which was suggested earlier). You could configure systemd, to not do syslog forwarding and let rsyslog handle syslog messages directly. This has a few downsides though: - syslog messages don't end up in the journal - non-syslog messages from journald don't end up in your syslog, say messages from systemd or services logging to stdout/stderr. _______________________________________________ systemd-devel mailing list systemd-devel@xxxxxxxxxxxxxxxxxxxxx https://lists.freedesktop.org/mailman/listinfo/systemd-devel