Long-form writing by a team that writes together.https://oykucann.github.io/https://oykucann.github.io/the-blog/posts/how-we-balanced-syslog-traffic/https://oykucann.github.io/the-blog/posts/how-we-balanced-syslog-traffic/Use of HAProxy, keepalived, and rsyslog to ensure even distribution of both syslog and HEC traffic on three Splunk Heavy Forwarders and how we managed to overcome TCP connection stickiness and absence of the source IP.Sat, 26 Sep 2026 00:00:00 GMThaproxykeepalivedrsyslogsplunkload-balancingÖykü Can, Tahsin Güner