What will happen if no members in a high speed logging pool are available ?
I have an irule that sends tcp event data, client_accepted, client_closed, server_connected and server_closed to splunk using hsl high speed logging. My question is what will happen to ongoing connections and new connection requests if all of the members of the high speed logging pool are down? So to clarify, the application is still running fine and all pool members for the application are up, it is just that the splunk servers that the logging data is being sent to are down. Will it just discard sending the logging data ? Will it queue up somewhere and when memory or disk is filled up will things break ? Does it matter whether I use UDP or TCP when sending the logging data ? I have taken the members of the hsl pool down for testing and when I use TCP as the protocol when I open the HSL pool, it seems to queue the log data somewhere and when I bring the hsl pool members back up it then sends a big batch of log data. Here are the lines of code from my irule for the logging piece.
set hsl_pool hsl-splunk-f5-pool
set hsl [HSL::open -proto TCP -pool $hsl_pool]
HSL::send $hsl "${current_date}T${timestamp}$current_date_offset event=CLIENT_ACCEPTED protocol=TCP client_ip=$client client_port=$client_port vip_ip=$vip vip_port=$vip_local_port vip_name=$vip_name \n "