Tahsin Güner

Avatar

The last server bender.

Worked on

  1. 7 min read

    How We Stopped One Splunk Forwarder From Taking All the Traffic

    Use of HAProxy, keepalived, and rsyslog to ensure even distribution of both syslog and HEC traffic on three Splunk Heavy Forwarders and how we managed to overcome TCP connection stickiness and absence of the source IP.