A TCP syslog Virtual Service must be created if clients will send syslog messages to Log Insight over TCP. To do this, follow the steps below:

  1. In the main menu of the LoadMaster WUI, select Virtual Services > Add New.

  2. Enter a valid Virtual Address.
  3. Enter 514 as the Port.
  4. Enter a recognizable Service Name, for example Log Insight TCP.
  5. Click Add this Virtual Service.
  6. Configure the settings as shown in the following table:
    Note: * Round robin is typically best to accomplish desired behavior of even traffic distribution. Least connection will result in an uneven distribution for syslog over TCP, especially when there is a low number of connections. If the Scheduling Method is set to least connection and there are a low number of connections, the Log Insight Split Interval (see below) will not behave as expected.

    Section

    Option

    Value

    Comment
    Basic Properties Service Name Log Insight

    Standard Options

    Scheduling Method round robin *

    Real Servers

    Checked Port 514 Click Set Check Port.
  7. Click Add New.

  8. Enter the Real Server Address.
  9. Click Add This Real Server.