> syslog experience? very efficient also on heavy load production instances, never lost a log, You’re lucky. The original syslog protocol was fire-and-forget U

> syslog experience? very efficient also on heavy load production instances, never lost a log, You’re lucky. The original syslog protocol was fire-and-forget UDP (which I believe is still the default, though it’s been ages and I could be wrong) and the daemon was single threaded. I/O or CPU starvation could easily lead to dropped logs.