All Apps and Add-ons

Suggestions for better vmware syslog load balancing?

kkentsplunk
Engager

Hi All,

How do you guys load balance syslog from all your esxi hosts? We have a few hundred hosts and 5 DCNs. If we manually configure Syslog.global.logHost on all the esxi hosts through a script or host profile we would be manually load balancing which DCN they send syslog to, and have to account for that in future host growth.

Any better way to do this?

Thanks

0 Karma

mgildenhorn_spl
Splunk Employee
Splunk Employee

Syslog data doesn't have to go to the DCN's. The DCN's are only required for pulling the metrics from the vSphere API from the vCenter machine. You could set up the syslog data to be sent to a syslog server. Then put a Universal Forwarder on that server to send the data up to your indexers.

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...