For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Stephen_Peters's avatar
Stephen_Peters
Icon for Nimbostratus rankNimbostratus
Jun 28, 2016

Using two Virtual Servers to limit duplicate syslog messages reaching a Splunk Forwarder.

I have a requirement to limit duplicate syslog messages reaching our dual site splunk deployment and to only forward logging messages received at a second site if the first site has an issue.   A...
application delivery
BIG-IP
health monitor
iRules
LTM
splunk
syslog
Arnaud_Lemaire's avatar
Arnaud_Lemaire
Icon for Employee rankEmployee
Jun 30, 2016

Hi,

 

  • use an irule on both.
  • create pool A and Pool B on both.
  • you can test pool member availability in the irule with LB::status
  • you can drop a connection with irule command drop/discard/reject

so this way you can on the backup site B test if the primary pool member A is available and drop the request accordingly.