Upload files to "6 SIEMs/Splunk"

6 SIEMs/Splunk/6.2loadbalancer.md

@@ -0,0 +1,31 @@
+Create Ubuntu VM for where IP will be directed to
+
+```
+sudo apt install haproxy
+```
+
+```
+sudo vi /etc/haproxy/haproxy.cfg
+```
+bottom of file
+```
+#--------------------
+# Custom Input
+#--------------------
+
+frontend loadbalancer
+ bind 10.2.25.69:8000 #change IP
+ mode http
+ default_backend searchheads #this will connect to below
+
+backend searchheads
+ balance roundrobin
+ cookie server insert indirect nocache
+ server searchhead1 10.2.25.73:8000 check cookie searchhead1 #change IP
+ server searchhead2 10.2.25.74:8000 check cookie searchhead2 #change IP
+ server searchhead3 10.2.25.75:8000 check cookie searchhead3 #change IP
+```
+
+```
+systemctl restart haproxy
+```