Nagios Support Forum

We have configured a load balancer in front of our 3 node log server cluster. I am testing the syslog messages and looks like the host IP is recorded as the IP of the load balancer and not the original host. Is there something we can configure on the LS side? or is this more of a resulting behavior of using a NLB?

This is almost certainly a case of the load balancer re-writing source IP addresses of your log sending hosts. This will need to be dealt with at the load-balancer level. There is a good discussion going on about this topic here: http://support.nagios.com/forum/viewtop ... 38&t=33005

Feel free to chime in with any input you might have!