Adding a single VLC in two SA server

[KaranGopani]

We are trying to add a VLC from DR to SA Server in DC and DR (dual-feeding) to get logs from both the sites. But we are not able to add the VLC in both the SA Servers. 

What are the possible ways to get this done?

We are using NW Logs version 11.0.0.0 on all components.

[EricPartington]

You need to configure syslog forwarding from the VLC to send a parallel stream to the DR stack.  The VLC will not show up as managed in that DR stack and will act as a syslog relay only.

Index lc.cid and forward.ip to see the IP of the relay (VLC) to know where the events are coming from.

https://community.rsa.com/community/products/netwitness/blog/2016/09/23/how-to-forward-syslog-from-a-remote-log-collector-to-another-destination

at the bottom of the thread