Dear Balazs yes there is a possibility but both syslog srvs will work at the same time which means yr node will send their logs to 2 syslog servers. for further send me the list of those devices ill let u know how to configure them to send logs to multiple srvs for example in MAX TNT access srvs its possible to set 2 logging servers but iam not sure abt this that devices are that mush inteligent that they make their own decisions in case of 1st server down it will re route yr log packet towards another syslog srv. Experience d0es n0t Alwayz Come With 0ld Age. Thanks Good Day, Farhan Ali Khan Network Operations Center CYBERNET "To solve a problem or to reach a goal, you...don't need to know all the answers in advance. But you must have a clear idea of the problem or the goal you want to reach." W. Clement Stone Disclaimer: The information in this email and in any files transmitted with it, is intended only for the addressee and may contain confidential and/or privileged material. Access to this email by anyone else is unauthorized. If you receive this in error, please contact the sender immediately and delete the material from any computer. If you are not the intended recipient, any disclosure, copying, distribution or any action taken or omitted to be taken in reliance on it, is strictly prohibited. Statement and opinions expressed in this e-mail are mine, and do not necessarily reflect those of my employer. ----- Original Message ----- From: Nick Baronian <kvetch@gmail.com> Date: Monday, November 6, 2006 8:40 pm Subject: Re: [syslog-ng] Alternate logging destination
I can't answer that but if this is a Linux HA-Linux might help you out. It is pretty simple to setup and works well in those types of failovers. http://www.linux-ha.org/
Nick Baronian
On 11/6/06, Szeti, Balazs <szeti.balazs@hp.com> wrote:
Hello!
I would like to design a centralized logging system with 50 edge nodes> and one center. It's quiet important to have all the logs even if the center is unreachable. Is there a way to configure syslog-ng to use an alternate> destination? For example if the centralized TCP destionation server is down, the edge node syslog-ng may log in to a local file, so the logs> can be reached later manually. When the center server in online again syslog-ng may log online again.
Any ideas?
Thanks in advance: Balazs _______________________________________________ syslog-ng maillist - syslog-ng@lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog- ng/faq.html>
_______________________________________________ syslog-ng maillist - syslog-ng@lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html