4 Replies Latest reply on Jun 18, 2013 9:21 AM by artek

    HA Receivers.

    TK45

      Hi,

       

      High-availability Receivers are used in primary/secondary mode so the secondary Receiver can swiftly take over functions when the primary Receiver fails.

       

      So I have a question.

       

      Is it possible that we structure HA by using more than 2 Receivers?

       

      Regards,

       

      このメッセージは次により編集されています: TK45 on 13/06/03 8:11:24 CDT
        • 1. Re: HA Receivers.

          Receiver HA mode is configurable with two devices only.

          • 2. Re: HA Receivers.
            TK45

            jaimen,

             

            Thank you for the reply.

            So, is it possible to use load balancer on the front of some Receivers?

             

            Regards,

            • 3. Re: HA Receivers.

              This may work for syslog data sources. I can see there will be issues with bookmarks on pull data sources such as WMI, or database sources.

              For full support of this functionality you could log a PER here: https://mcafee.acceptondemand.com/index.jsp

              1 of 1 people found this helpful
              • 4. Re: HA Receivers.
                artek

                Hi Jaimen,

                 

                few months ago I explored thist subject: we are trying to prepare "semi" HA structure, based on customers distributed environment. Customer has two, geografically separated DCs, so we can't use native ERC HA funcionality. We discussed possibility od usage a load ballancers to switching the syslog devices between Receivers located in the DCs. Unfortunatelly - on that time - the answer wa: "it is not possible". First problem with that kind of structure regards the data sources configuration. As you know - ERC has iptables firewall, and to receive any data from particular data source, you have to add it to ERC. But - it is not possible to add the same device source (with the same IP address) to more than one ERC... We asked the PS about the possibility to prepare the script (manually) moving the data source definitions form one ERC to the other one, but - without success.

                 

                So - if you are takling, that it is possible to use load ballancers for switching od syslog data sources - could you tell us more information, how to configure that funionality?

                 

                Regards,

                Artur