Forum Discussion
I have the same scenario and I like the simplicity in the suggested solution. I on the other hand have netflow that I want to duplicate to two different flow collectors.
I tested it and packets are duplicated towards the two destinations but the source address is set to the self IP of the F5.
I tried adding snat under the CLIENT_ACCEPTED section and setting it to the client source address but it did not make any difference.
Is there a way to preserve the source IP address when using HSL::open/HSL::send?
Yesterday I found out that HSL::send will use the self ip of the outgoing interface. Using the snat command will make no difference.
- jaikumar_f5Nov 06, 2020MVP
HSL sends logs from TMM, unlike native syslog-ng which uses mgmt. To get the mgmt, i think you have to create a static route table.