Splunk® Phantom

Administer Splunk Phantom

Acrobat logo Download manual as PDF


This documentation does not apply to the most recent version of Phantom. Click here for the latest version.
Acrobat logo Download topic as PDF

Warm standby tools

Use the /<PHANTOM_HOME>/phantom/bin/setup_warm_standby.pyc script to manage warm standby.

Warm standby script arguments

Argument Description
-h, --help Show this help message and exit.
--primary-mode Run the instance as the primary in the warm standby pairing.
--standby-mode Run the instance as the warm standby in the warm standby pairing.
--version Show the program's version number and exit.
--status Show the status of the current Splunk Phantom instance.
--configure Configure warm standby. Additional arguments are required.
--off Turn warm standby off on the current instance based on which mode the instance is in.
--convert-to-primary Convert a standby to primary valid only in case of --standby-mode
--primary-ip <PRIMARY_IP> IP address of the primary.
--standby-ip <STANDBY_IP> IP address of the warm standby.
-d, --ignore-database Ignore the PostgreSQL database. Ignores the Postgres database during setup. Only backs up system files.
-t, --ignore-vault Ignore vault. Ignores the vault from setup. Only backs up various contents from /<PHANTOM_HOME>/.
-l <RECOVERY_DATABASE_LOCATION>,

--recovery-database-location <RECOVERY_DATABASE_LOCATION>

When setting up the standby, copy the original database to this location for recovery in the event of a script failure.
--primary-phantom-version <PRIMARY_PHANTOM_VERSION> Version of the primary Splunk Phantom instance. Only valid for --standby-mode. If passed, validates against the current version.
-r <REMOTE_USER>, --remote-user <REMOTE_USER> The username of the remote user.
-x, --relax_verification Relax user verification requirements for non-root installations. Setting this option is not recommended.
-p <SSH_PORT>, --ssh-port <SSH_PORT> Port used to be used by all SSH commands.
--no-modify-ciphers Don't overwrite ssl_cipher in PostgreSQL configurations.
-u, --ignore-package-updates Skip updating packages. Skips re-installing rpm and pip packages.
Last modified on 26 May, 2020
PREVIOUS
Upgrade or maintain warm standby instances
  NEXT
Share data from Splunk Phantom

This documentation applies to the following versions of Splunk® Phantom: 4.8


Was this documentation topic helpful?


You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters