Using multiple interfaces to collect logs also provides the benefit
of load balancing, which is particularly useful in environments
where the firewalls forward logs at high rates to the Log Collectors.
If you enable the
forward to all Log Collectors
setting in
the Collector Group
log forwarding preference
list, logs are sent on all configured interfaces configured.
Otherwise, logs are forwarded over a single interface, and if that
interface goes down, log forwarding continues over the next configured
interface. For example, you configure Eth1/1, Eth1/2, and Eth1/3
for log forwarding. In the event the Eth1/1 interface goes down,
log forwarding continues over Eth1/2.