On Thu, 20 Jun 2013, Dirk wrote:
Hi all,
I do have a logical problem I need a hint for.
I want to configure redundant central logservers so that
- the clients send messages to one and fail over to the second if the first
is off
- not all clients send to the same primary, but share the load (half of the
clients sends to server A as primary, other half to B as primary)
That is the easy part, I have that working.
Now I want the logservers to forward everything they receive over the network
to the other logserver. In the end they should have the same amount of log
messages, the complete set.
I cannot simply add a line to the logservers' config forwarding everything
over to the other one - that would build a loop.
So I need a way of configuring "forward only what you received from clients,
but not from the other logserver". That still would be fairly easy if I
replaced the originating hostname in the log message with that of the
forwarding logserver.
But I want the originating logclient's hostname to remain.
I remember having solved that problem once some years ago, but I googled all
day and did not find the solution.
Any hint or help would be appreciated.
:fromhost, != 'ip.of.other.centralbox', @@ip.of.other.centralbox
each box will send all logs that didn't arrive _from_ the other box _to_ the
other box
now, beyond this you can get fancy and add queueing, RELP, etc to better handle
the case where the other box is down.
In addition, instead of pointing clients to one box or the other, you can use
pacemaker to manage a CLUSTERIP VIP that will let you point all your clients at
one IP address, and then process half of the connections on each box, and when
one box goes down the connections will all be handled on the other box.
David Lang
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
