Hi Mark,

Please elaborate a bit more about your architecture. Relevant config parts are also appreciated.

Are there two syslog-ng servers running on the same machine?

Or is it just one syslog-ng instance with two different log sources (on different ports for example), and there is a host which sends to both log sources?

Maybe there are 2 different machines running their own syslog-ng, but using a network shared file system?

Thanks!

Cheers,

Attila

From: syslog-ng <syslog-ng-bounces@lists.balabit.hu> on behalf of Faine, Mark R. (MSFC-IS40)[NICS] <mark.faine@nasa.gov>
Sent: Thursday, January 14, 2021 9:21 PM
To: Syslog-ng users' and developers' mailing list <syslog-ng@lists.balabit.hu>
Subject: [syslog-ng] Failover/Hi Availability

CAUTION: This email originated from outside of the organization. Do not follow guidance, click links, or open attachments unless you recognize the sender and know the content is safe.

If I have two Syslog-ng servers receiving logs from the same source and writing to the exact same file system destination, is there a way to do this without running into issues with the two instances clobbering the files or file locking issues?

Thanks,

-Mark