> Additionally, the benefits from doing the logging in the kernel rather than in user space are low overhead, accurate tagging, and no scheduler thrashing.
just for the record, accurate tagging doesn't require that this be in the kernel, both systemd's journald and rsyslog can do the accurate tagging from userspace.