rsyslog messages are lost when failing over rsyslog server

Solution Unverified - Updated -

Issue

  • rsyslog messages are lost when failing over rsyslog server
  • I have built a 2 node HA cluster using pacemaker, cman and corosync. This supports an instance of HAProxy in Active/Active mode supporting rsyslog. The supporting VIP is managed by iptables and clusterIP. When running rsyslog over RELP and one node is deactivated there is no loss of message traffic, which is expected. When running rsyslog over TCP and one node is deactivated the client takes approx 3 secs to fail over.
  • The time between rsyslog stopping on one server and the failover server's ARP for the Virtual IP results in loss of rsyslog messages

Environment

  • Red Hat Enterprise Linux 6+
  • rsyslog remote log daemon
  • Clustered syslog server sharing a VIP for logging clients to connect to

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content