Any idea what you're looking at in terms of syslog/trap volume?
In my setup today I get SNMP traps but not syslog to my pollers
The syslogs numbers are more den 2K per sec!!!!
I saw that https://www.youtube.com/watch?v=enK8Cb2tMDw Leon- Large scale SWI it's look like it will be smart to offload syslog & snmp trap out of the new setup.
Now Kiwi syslog can be a proxy to those 1% importet traps.
Is there any other tool window/linux that can help with the unknow load of SNMP traps ?
Should I run it APE on the other DC or poll that SNMP traps over the WAN?(The other network is around +-200Km away fiber MPLS )
My setup today
SLX+ APE -> SNMP/SNMP-TRAP
New Unknow total elemets in the DC2
Syslog/trap server forwad only alarms to the APEX
Using Kiwi to filter and forward would certainly be a good option. There are free solutions that could work as well (syslogd, etc) but won't be as easy to configure.