I guess it can work if by multiple pollers you mean you have 2 different servers running observium pollers and both have the syslog-module enabled. The syslog process just listens for syslog-packets, parses them and then inserts the parsed data in the MySQL-database. If you have a loadbalancer in front the balances all UDP-packets to the different observium-servers then there should not be any duplicate packets and I guess it should be no problems. All your devices can just send syslog to the loadbalancer IP and they get distrubuted to the observium-servers. If you dont have a loadbalancer and just add the different observium-IPs as syslog-destinations then they might send the same message to all the servers as Adam says and then you will have duplicate messages in the DB. /Markus
Den tis 26 mars 2019 kl 16:18 skrev Adam Armstrong via observium < observium@observium.org>:
The poller process isn't actually handling the syslog, that's done by the syslog daemon itself, which calls a php script to inject the messages into MySQL.
There's not really much of a logical way to do what you're asking, because we can never know if a message is a duplicate or not.
adam.
On 2019-03-26 14:07:13, Ron Culler via observium observium@observium.org wrote:
I know you can set multiple pollers to query the devices but is it possible to also enable syslog on each poller as well?
I would like to have multiple syslog servers for load and redundancy.
Thanks
Ron
observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium