Forum Discussion
Adam_1421
Nimbostratus
NimbostratusDuplicate syslog traffic to multiple destinations
Hi,
I have an appliance that only allows setting of one syslog destination, but I have multiple syslog servers. The current solution involves logging to a nearby server which then sends the mes...
JRahm
Admin
AdminAnother possibility: log the messages directly to your servers, then discard:
when RULE_INIT {
Define Syslog Destinations
set static::ls "10.10.20.49 10.10.20.247"
}
when CLIENT_ACCEPTED {
foreach logserver $static::ls {
log $logserver local0.info "[IP::client_addr] syslog message: [UDP::payload]"
}
discard
}
Untested and not very scalable, just brainstorming here. HTH...Jason
