This new feature has been introduced for the auditing of Cluster installations and hosts with multiple IP addresses.
The concept behind the aggregation of flows from different sources resides on the integration of log flows from load balanced hosts or hosts in failover configuration within a single host definition. This allows also the registration of hosts having multiple IP addresses and that can appear with different IP source addresses.
With a new logic introduced in SyslogView 1.7 it is now possible to integrate those log flows from multiple IP sources within a single log file.
This feature is intended to be used for host having a virtual cluster IP address, but sending also through the physical source IP. On the other hand it is useful for hosts with simply multiple network sockets.