This document describes high availability options for the ULS software.
ULS itself does not bring HA capabilities out of the box, but it was built to support different HA techniques.
To use high availability alongside with the provided ULS docker container, a HA orchestration layer like SWARM, KUBERNETES or others is required.
It is highly recommended, to enable the ULS auto-resume feature and store the according "resume - data" on a persistent volume which is available accross different compute nodes (e.g. PVC, NFS, ...).
This setup allows the ULS container(s) to maintain HA across multiple compute nodes.
Whenever container usage isn't an option, high availability can be achieved by using OS-based high availability systems like pacemaker / corosync or heartbeat.
To avoid duplicate events in the SIEM, it is highly recommended to enable the ULS auto-resume feature and store the according "resume - data" on a persistent volume that is available across the designated n odes (e.g. DRBD, NFS, ...).