drumrolfe_11624
Feb 05, 2014Nimbostratus
Syslog Distribution
Hello:
I have a situation where we receive raw syslog from remote devices across the WAN, but have multiple syslog destinations that need to receive the syslog messages (ArcSight, Splunk, etc).
I want to know if it is possible to configure the Big-IP 10200 to have a virtual server IP to receive the syslog messages from remote devices across the WAN and then duplicate them to a pool of syslog servers that are on the LAN. The purpose of this would be to de-duplicate syslog traffic across the WAN.
Thanks!
Hi, you can duplicate syslog messages to another pool. This article descirebes how to do it link.