I use a syslog server which sends log to my cluster (3 servers cluster). Each server has a logstash instance.
The syslog server send only to 2 servers.
I found that my entries are doubled and I think it's because the syslog server send the same logs to the two servers.
So I would like to know if there is a way to send to only one IP which will send to the three logstash servers. I thought about redis but I've nerver used it and don't know how it works.
Thanks for your help !