Using two Virtual Servers to limit duplicate syslog messages reaching a Splunk Forwarder.

Hi,

• use an irule on both.
• create pool A and Pool B on both.
• you can test pool member availability in the irule with LB::status
• you can drop a connection with irule command drop/discard/reject

so this way you can on the backup site B test if the primary pool member A is available and drop the request accordingly.