On openSUSE 13.2 with syslog-ng 3.5.6, I'm seeing these messages frequently: Mar 08 14:15:01 piccard systemd-journal[367]: Forwarding to syslog missed 1 messages. Mar 08 14:15:43 piccard systemd-journal[367]: Forwarding to syslog missed 3 messages. Mar 08 14:20:01 piccard systemd-journal[367]: Forwarding to syslog missed 1 messages. Mar 08 14:20:43 piccard systemd-journal[367]: Forwarding to syslog missed 1 messages. journald by default has ForwardtoSyslog=yes, but # lsof /run/systemd/journal/syslog COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME systemd 1 root 27u unix 0xffff880013130400 0t0 13446 /run/systemd/journal/syslog syslog-ng 584 root 3u unix 0xffff880013130400 0t0 13446 /run/systemd/journal/syslog seems to suggest syslog-ng is reading from /run/systemd/journal/syslog ? syslog-ng.conf: source src { system(); internal(); }; -- Per Jessen, Zürich (2.4°C) http://www.dns24.ch/ - your free DNS host, made in Switzerland.