Forum Discussion
Smithy
Feb 11, 2020Cirrostratus
I'm not familiar with Sumo Logic, but for my 3 node ELK cluster with 2 logstash servers, I just use HSL. See below.
create ltm node elk1.f5.demo { address 10.1.30.111 description "ELK Logstash/Data/Master Node" }
create ltm node elk2.f5.demo { address 10.1.30.112 description "ELK Kibana/Master Node" }
create ltm node elk3.f5.demo { address 10.1.30.113 description "ELK Logstash/Data/Master Node" }
create ltm pool elk_log_5401_pool { members replace-all-with { elk1.f5.demo:5401 elk3.f5.demo:5401 } }
create sys log-config destination remote-high-speed-log elk_hsl_5401_dest { pool-name elk_log_5401_pool protocol udp distribution balanced }
create sys log-config publisher elk_log_5401_pub destinations replace-all-with { elk_hsl_5401_dest }