I'd simply forward from two remote rsyslogs to a central one using RELP
and not bother with NFS and such. The upside is that you can scale this
easily to other non-local installation (it's way easier to add another
RELP source than to export your NFS to some external site).
On 30.06.2022 12:36, Dimi Onobodies via rsyslog wrote:
Hi.
I have a single rsyslog server (on cloud) receiving logs from a number of
systems (also in cloud). I am planning to add a second server and use NFS cloud
storage as the backend. This storage will be shared across the two syslog
systems.
At the moment, the single rsyslog system receives around 380.000 messages per
minute and stores them on local disk.
The reason for opting NFS shared storage is that logs from systems will be on
one location instead of two. For example, without shared storage and due to
load balancing, Monday logs from serverA can be found in rsyslog1 server and
Tuesday logs for same server can be on rsyslog2 server.
However, I am thinking about the performance of NFS and the (negative) impact
that it could cause on rsyslog. I am concerned about:
* NFS deadlocks
* behaviour when two rsyslog processes write to same file
* encryption and network delay of NFS backend
* rotation of files
Has anyone implemented such rsyslog setup and found it problematic?
Any thoughts/comments for such setup?
Thanks
_______________________________________________
rsyslog mailing list
https://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
_______________________________________________
rsyslog mailing list
https://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
