https://community.splunk.com/t5/Getting-Data-In/ANYCAST-redundancy-with-syslog/m-p/59576#M11752 <P>Yes, using Quagga + ospfd. Logs get sent to an anycast syslog server IP, which routes to an actual syslog server, which has the Splunk forwarder running on it.</P> Thu, 12 Apr 2012 15:31:05 GMT kogane 2012-04-12T15:31:05Z https://community.splunk.com/t5/Getting-Data-In/ANYCAST-redundancy-with-syslog/m-p/59575#M11751 <P>Is anyone using Anycast technology to provide syslog redundancy for the forwarders? Anycast idea much like that used for DNS...</P> Fri, 27 Jan 2012 16:01:34 GMT https://community.splunk.com/t5/Getting-Data-In/ANYCAST-redundancy-with-syslog/m-p/59575#M11751 sladei 2012-01-27T16:01:34Z https://community.splunk.com/t5/Getting-Data-In/ANYCAST-redundancy-with-syslog/m-p/59576#M11752 <P>Yes, using Quagga + ospfd. Logs get sent to an anycast syslog server IP, which routes to an actual syslog server, which has the Splunk forwarder running on it.</P> Thu, 12 Apr 2012 15:31:05 GMT https://community.splunk.com/t5/Getting-Data-In/ANYCAST-redundancy-with-syslog/m-p/59576#M11752 kogane 2012-04-12T15:31:05Z https://community.splunk.com/t5/Getting-Data-In/ANYCAST-redundancy-with-syslog/m-p/59577#M11753 <P>Kogane, could you please elaborate a little on your post? I'm aware Quagga is a fork of Zebra, how did you config syslog to forward to anycast?</P> Fri, 18 May 2012 16:56:57 GMT https://community.splunk.com/t5/Getting-Data-In/ANYCAST-redundancy-with-syslog/m-p/59577#M11753 eegilbert 2012-05-18T16:56:57Z https://community.splunk.com/t5/Getting-Data-In/ANYCAST-redundancy-with-syslog/m-p/59578#M11754 <P>We just have syslog on our hosts configured to send data to "sysloghost", which resolves to an anycast IP. The actual syslog servers are the ones running quagga/ospfd.</P> Fri, 18 May 2012 16:59:57 GMT https://community.splunk.com/t5/Getting-Data-In/ANYCAST-redundancy-with-syslog/m-p/59578#M11754 kogane 2012-05-18T16:59:57Z https://community.splunk.com/t5/Getting-Data-In/ANYCAST-redundancy-with-syslog/m-p/59579#M11755 <P>Gotcha, I think I know where to go with this now, thank you!</P> Fri, 18 May 2012 17:08:33 GMT https://community.splunk.com/t5/Getting-Data-In/ANYCAST-redundancy-with-syslog/m-p/59579#M11755 eegilbert 2012-05-18T17:08:33Z