Stick with TCP and the reliability use case for your data, redis, elastic, 

I chose multiple for higher levels of capture. file, on-prem es, 3rd party.  

On Tue, Feb 6, 2018 at 6:31 PM, Pierce, Stevan - PHX <Stevan.Pierce@dignityhealth.org> wrote:

I am working on setting up OSE as a relay and would like to have storage set aside in case a destination upstream from the relay goes down.  How does load balancing syslog messages work when clustering at the OS level?

 

If I am sharing storage across multiple relays, how would I go about setting it up so that messages from one server does not overwrite another server?

 

swp


______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq