Hi David,
just for the records, it had to be
:fromhost-ip, !isequal, "other logserver's IP" @@"otherlogserver's IP":514
Thanks, now the central logservers do what is expected without horrific
message loops.
Dirk
Am 20.06.13 23:31, schrieb David Lang:
On Thu, 20 Jun 2013, Dirk wrote:
Hi all,
I do have a logical problem I need a hint for.
I want to configure redundant central logservers so that
- the clients send messages to one and fail over to the second if the
first is off
- not all clients send to the same primary, but share the load (half
of the clients sends to server A as primary, other half to B as primary)
That is the easy part, I have that working.
Now I want the logservers to forward everything they receive over the
network to the other logserver. In the end they should have the same
amount of log messages, the complete set.
I cannot simply add a line to the logservers' config forwarding
everything over to the other one - that would build a loop.
So I need a way of configuring "forward only what you received from
clients, but not from the other logserver". That still would be
fairly easy if I replaced the originating hostname in the log message
with that of the forwarding logserver.
But I want the originating logclient's hostname to remain.
I remember having solved that problem once some years ago, but I
googled all day and did not find the solution.
Any hint or help would be appreciated.
:fromhost, != 'ip.of.other.centralbox', @@ip.of.other.centralbox
each box will send all logs that didn't arrive _from_ the other box
_to_ the other box
now, beyond this you can get fancy and add queueing, RELP, etc to
better handle the case where the other box is down.
In addition, instead of pointing clients to one box or the other, you
can use pacemaker to manage a CLUSTERIP VIP that will let you point
all your clients at one IP address, and then process half of the
connections on each box, and when one box goes down the connections
will all be handled on the other box.
David Lang
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a
myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST
if you DON'T LIKE THAT.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
