I have managed to get the TCP + SSL load balancing working, but no how I’d like it to work.
Currently we send logs from one instance to another and in-between there is a HAProxy server that terminates the SSL and send the data on. I have managed to get this working by setting the server timeout to 5ms, so if HAProxy doesn’t receive data within 5ms it terminates the connection. This does send the one Graylog output to both nodes on the receiving cluster, but we lose logs doing this.
Is there a way for the GELF TCP + TLS output to terminate the outbound connection every few seconds, as the one continuous TCP connection cannot be load balanced.