Splunk Syslog UDP Virtual Service

The following are the steps involved and the values required to configure the Splunk Syslog UDP Virtual Service:

1. In the main menu of the LoadMaster Web User Interface (WUI), go to Virtual Services > Add New.

   

2. Enter a valid IP address in the Virtual Address text box.
3. Enter 514 in the Port text box.
4. Enter a recognizable Service Name, for example Splunk Syslog udp.
5. Ensure udp is selected as the Protocol.
6. Click Add this Virtual Service.
7. Enter the details shown in the following table:

   Section	Option	Value
   Standard Options	Transparency	Enabled
   	Persistence Mode	Source IP Address
   	Prersistence Timeout	1 Minute
   	Scheduling Method	Weighted round robin
   Real Servers	Real Server Check Method	ICMP Ping

8. Add the Real Servers:
   1. Click the Add New button.
   2. Enter the IP address of the AX Server.
   3. Enter 514 as the Port.
      Note: The Real Server Port should match the Virtual Service Port.

      Note: The Forwarding method and Weight values are set by default. An administrator can change these.
   4. Click Add this Real Server. Click OK to the pop-up message.
   5. Repeat steps b) to d) above to add more Real Servers as needed, based on the environment.