I have been using a php script to write logs to rsyslog and then rsyslog send messages directly to flume(syslogtcp source) on a tcp port.
Now as I am moving to AWS I want to introduce an ELB(Elastic Load Balancer) layer between rsyslog & flume nodes. So I added an ELB with tcp port forwarding. It seems like the ELB is getting the events from rsyslog but it is not forwarding it to flume . My flume source is a syslog tcp source which uses the same port on which the load balancer forwards the events.
Any help on this would be great.