One way would be to add an "accept" rule for 514/udp; iptables will then track the packets and bytes for you.
For example, to add a temporary rule
$ sudo firewall-cmd --add-port=514/udp
success
(add --permanent if desired).
Example output:
$ sudo iptables -nxv -L IN_public_allow | grep "udp...
Is there an alternate approach?
@JennyD Can you help me on haproxy deployment query?
Below is the current architecture of Syslog-NG to avoid single point of failure.
Currently devices send same syslog message to two syslog servers listening on UDP port 514. Each server stores the syslog message(*.log) and also forwards the same message to multiple consumers.
Forwarding causes...
Some things happened yesterday that caused a need for us to (quickly) remove a site's eligibility to contribute to the list of hot network questions. For those of you not familiar with what we've come to call the 'HNQ' list, please visit the link; the list of questions shown as 'hot' on stackexch...
1) A system built specifically to drive engagement through controversy clickbait; 2) a whole bunch of insufferable network sites. Who would have thought?
Also 3) a model that actively encourages question and answer authors to title questions for maximum clickthrough.
@overexchange I've answered now - haproxy doesn't fit your needs, unfortunately. This is rather a broad topic, and figuring out which solution works best in a given environment is hard to do on a Q/A site. I've solved this problem in different ways depending on the client's requirements and environment during my 20 years as a sysadmin...
In this case, if your two syslog forwarding servers are on the same network, I think I'd probably go with a clustering service such as Corosync/pacemaker. It's fairly easy to configure.
On Windows I use sharpkeys to remap keys. On Mac I use Karabiner Elements to remap keys.
Is there a preferably built in way to remap keys based on scan cade?
@Ahmed I just happened to notice that you have seven questions on the site, and that none of them has an accepted answer. Although not strictly necessary, it would help readers of your questions (people having similar issues) to know that one of the answers actually solved your question. If you have some time over, then maybe go through the answers and accept the best ones and upvote the good ones?
But i haven't get an answer to my previous question "Print all lines that have all consecutive duplicates characters. Print all lines that have specific properties"