Hello, I have a question. I am forwarding logs to 2 syslog-ng servers behind a VIP. They are not configured in HA as clustered. They are siting behind a load balancer. The logs are not being distributing properly. I am assuming this is because the are not in HA mode. I am being told this is not an issue by the server admin. Would anyone know if them not being in HA would cause logs to not balance? If so could you provide an article by chance? Thank you everyone I appreciate the help.

11 Spice ups

Using a load balancer in front of the the syslog servers would most likely have a round-robin configuration. That would cause log entries to be spread between the servers. I’m not sure if that’s what you mean by not being distributing properly. Depending how you access the logs, it may not be a problem this way. You should supply more information on the load balancer being used, it’s setting for how it chooses hosts, and more clarity on logs not being in balance.