Fault tolerance

Hello, I'm in a situation where I need to have some fault-tolerance
with Bro. I need Bro data in two geographically disparate sites. Since
I can't setup two managers I'm not sure how to go about accomplishing
this.


It doesn't work to just copy the data to your secondary data center hourly? Maybe you could explain more about what sort of fault tolerance your looking for?

  .Seth

That's ok, but what happens if the first data center becomes a crater
in the ground? The workers will still be trying to send to the
non-existent manager. Even if you have shared SSH keys from the
secondary server to push out a new config that makes it the manager,
its still a manual process and if something happens to make a data
center a crater, manually switching Bro would likely be low on the
list of priorities.

Ideally I'd like to see each worker send to two servers in tandem.

That's ok, but what happens if the first data center becomes a crater
in the ground? The workers will still be trying to send to the
non-existent manager.

Ahh, the first data center being where your manager is?

Ideally I'd like to see each worker send to two servers in tandem.


Sorry, that's not something that is possible right now. There is some ongoing work to make cluster deployments a bit more flexible, but it will be some time still until that's in place.

  .Seth