Hello HAProxy users I'm currently trying to get HAProxy as my main LB for syslog messages TCP and UDP messages for network devices in front of a syslog cluster. For the UDP messages I'm struggling get the correct sender address in the messages being forwarded to backend servers.
All the time I see one of 2 things in my message. * Localhost IP (127.0.0.1 translated to localhost in the logs) * _gateway IP(which is the GW infront of the HAProxy LB) * Or - (Yes just a - no IP or hostname !) But the actually sending hosts keeps getting stripped/replaced from the messages. I tried the following different configuration now: log-forward syslogUDPFrontend-10514 # Listen on UDP and TCP 10514 dgram-bind "${vipAddr}":10514 log 152.73.245.2:10514 format local local0 Host received on rsyslog side: _gateway.log Mar 28 11:19:51 _gateway 11605603: 11605648: Mar 28 09:19:50.982: %ILPOWER-5-DETECT: Interface Te2/0/13: Power Device detected: IEEE PD log-forward syslogUDPFrontend-10514 # Listen on UDP and TCP 10514 dgram-bind "${vipAddr}":10514 log 152.73.245.2:10514 format rfc3164 local0 Host received on rsyslog side: Localhost.log Mar 28 11:21:02 localhost 1004931: 1005091: Mar 28 2022 09:21:02.102 UTC: %LINK-3-UPDOWN: Interface GigabitEthernet3/0/39, changed state to down log-forward syslogUDPFrontend-10514 # Listen on UDP and TCP 10514 dgram-bind "${vipAddr}":10514 log 152.73.245.2:10514 format rfc5425 local0 Host receiving on rsyslog side: -.log Mar 28 10:49:07 - - 1093665: 1093708: Mar 28 2022 08:49:06.471 UTC: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/9, changed state to down I also tried adding the log global section and have the following line in the global section: log-send-hostname %H log-send-hostname Still giving me the some changed hostnames in the syslog strings ! Any suggestions of wrong configuration or something I missed are very much appreciated. Or maybe what I want, can't be done with HAProxy ? Best regards Jan This e-mail (including any attachments) is intended for the addressee(s) stated above only and may contain confidential information protected by law. You are hereby notified that any unauthorized reading, disclosure, copying or distribution of this e-mail or use of information contained herein is strictly prohibited and may violate rights to proprietary information. If you are not an intended recipient, please return this e-mail to the sender and delete it immediately hereafter. Thank you.