According to http://wiki.rsyslog.com/index.php/FailoverSyslogServer config
*.* @@primary-syslog.example.com $ActionExecOnlyWhenPreviousIsSuspended on & @@secondary-1-syslog.example.com & @@secondary-2-syslog.example.com & /var/log/localbuffer $ActionExecOnlyWhenPreviousIsSuspended off if connection to @@primary-syslog.example.com fails rsyslog will try to send to @@secondary-1-syslog.example.com if that fails too then to @@secondary-2-syslog.example.com and if that fails too then to /var/log/localbuffer BUT with my testing with 5.8.0 what really happens is: if connection to @@primary-syslog.example.com it will send the same messages to ALL the remaining & @@secondary-1-syslog.example.com & @@secondary-2-syslog.example.com & /var/log/localbuffer destinations Any idea why ? And how to make it behave like described in http://wiki.rsyslog.com/index.php/FailoverSyslogServer? i.e send it to only ONE failover server Thanks Alex _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
