Hello,
I have Meraki syslog configured on the port 35142/UDP to go trough the HAProxy loadbalancer and send the logs to 2 logstash servers. The 2 logstash servers permit to have high availability. If one fail, all logs are send to the one still up. Otherwise, both gets about 50/50 of the logs.
Issue : Logs are truncated when getting to the logstash servers.
I’m 100% sure that it is the loadbalancer which truncate the last 2 characters of the log before sending them to the logstash. I’ve used tcpdump to confirm it. TCPdump shows the log is not truncated when getting on the loadblancer. It is truncated when getting on the logstash servers.
Do you know how I can solve this issue please ?
Anything wrong in my configuration ?
Here is my configuration on the LB :
=> Receive from Meraki on UDP and send on TCP
log-forward Meraki
bind *:35142
dgram-bind *:35142
log ring@logbuffer local0
ring logbuffer
format rfc5424
maxlen 1900
size 32764
timeout connect 5s
timeout server 10s
server logserver1 192.168.10.41:35142 check
server logserver2 192.168.10.42:35142 check
Thank you by advance!
1 post - 1 participant