Receiver HA mode is configurable with two devices only.
Thank you for the reply.
So, is it possible to use load balancer on the front of some Receivers?
1 of 1 people found this helpful
This may work for syslog data sources. I can see there will be issues with bookmarks on pull data sources such as WMI, or database sources.
For full support of this functionality you could log a PER here: https://mcafee.acceptondemand.com/index.jsp
few months ago I explored thist subject: we are trying to prepare "semi" HA structure, based on customers distributed environment. Customer has two, geografically separated DCs, so we can't use native ERC HA funcionality. We discussed possibility od usage a load ballancers to switching the syslog devices between Receivers located in the DCs. Unfortunatelly - on that time - the answer wa: "it is not possible". First problem with that kind of structure regards the data sources configuration. As you know - ERC has iptables firewall, and to receive any data from particular data source, you have to add it to ERC. But - it is not possible to add the same device source (with the same IP address) to more than one ERC... We asked the PS about the possibility to prepare the script (manually) moving the data source definitions form one ERC to the other one, but - without success.
So - if you are takling, that it is possible to use load ballancers for switching od syslog data sources - could you tell us more information, how to configure that funionality?