Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

[9.108-23] Remote syslog, Hot Standby cluster and dublicate logs

Hi,

We have two asg525 in hot standby cluster mode. UTM host name is mx1. We send logs to a remote syslog server. We are seeing dublicate log entries for both mx1 and mx1-2. So does it meen both of the cluster nodes send the same message to remote syslog server? How can I fix it?

Here is some sample lines from remote syslog server:

Feb  7 15:26:27 79.***.***.*** 2014: 02:07-15:25:26 mx1 exim-in[556]: 2014-02-07 15:25:26 id="1003" severity="info" sys="SecureMail" sub="smtp" name="email rejected" srcip="65.181.126.5" from="submit@sciencewebpublishing.com" to="***@***" size="-1" reason="rdns_helo" extra="RDNS missing"
Feb  7 15:26:27 79.***.***.*** 2014: 02:07-15:25:26 mx1-2 exim-in[556]: 2014-02-07 15:25:26 id="1003" severity="info" sys="SecureMail" sub="smtp" name="email rejected" srcip="65.181.126.5" from="submit@sciencewebpublishing.com" to="***@***" size="-1" reason="rdns_helo" extra="RDNS missing"


This thread was automatically locked due to age.