Recreate warm standby after a failover
After a failover, the previous warm standby is now a standalone primary instance of and the previous primary is offline or otherwise unavailable. A administrator can reconfigure these two instances into a new warm standby pair.
For the rest of this topic the two instances will be referred to as either instance A or instance B.
- Instance A
- The original primary instance.
- Instance B
- The original warm standby instance of .
Configure instance B as the primary and instance A as the warm standby
This is the easiest way to reconfigure the instances for warm standby after a failover.
The initial states for your instances must be:
- Instance A, the original primary is online but services are not running.
- Instance B, the former warm standby is now a stand alone instance.
If the Splunk SOAR (On-premises) instances are not in these states, stop. Evaluate if another option is more appropriate for your needs.
Do these steps as either the root user or a user with sudo permissions.
- SSH to instance A. SSH <username>@<instance_A_hostname>
- Start PostgreSQL. /<PHANTOM_HOME>/bin/phsvc start postgresql-11
- Start pgbouncer. /<PHANTOM_HOME>/bin/phsvc start pgbouncer
- Turn off primary mode phenv python /<PHANTOM_HOME>/bin/setup_warm_standby.pyc --primary-mode --off
- Start PostgreSQL.
- SSH to instance B. SSH <username>@<instance_B_hostname>
- Configure instance B as the new primary. phenv python /<PHANTOM_HOME>/bin/setup_warm_standby.pyc --primary-mode --configure --primary-ip <primary_ip> --standby-ip <standby_ip>
- Configure instance B as the new primary.
- SSH to instance A. SSH <username>@<instance_A_hostname>
- Configure instance A as the new warm standby. phenv python /<PHANTOM_HOME>/bin/setup_warm_standby.pyc --standby-mode --configure --primary-ip <primary_ip> --standby-ip <standby_ip>
- Configure instance A as the new warm standby.
Now the two instances are configured for warm standby. Instance B is now the primary and instance A is now the warm standby.
Configure instance A as the primary and instance B as the warm standby
This option returns the instances to the same roles they served before the failover. This can be done after you have configured the instance B as the primary using the steps in the earlier section.
Each time warm standby is configured the database on the standby instance is erased and the entire Splunk SOAR (On-premises) PostgreSQL database has to be streamed from the primary.
The initial states for your instances must be:
- Instance B, the former warm standby is now a stand alone instance. All services are running.
- Instance A, the original primary is configured as the warm standby. All services are running.
If the Splunk SOAR (On-premises) instances are not in these states, stop. Evaluate if another option is more appropriate for your needs.
- SSH to instance B. SSH <username>@<instance_B_hostname>
- Stop services. /<PHANTOM_HOME>/bin/stop_phantom.sh
- Stop services.
- SSH to instance A. SSH <username>@<instance_A_hostname>
- Configure instance A as the primary. phenv python /<PHANTOM_HOME>/bin/setup_warm_standby.pyc --standby-mode --convert-to-primaryWarm standby is disabled. Instance A is a standalone instance, while instance B is idle and all services have been shut down.
If the Splunk SOAR (On-premises) instances are not in the described states, stop. Check for and do any steps which have been missed before proceeding.
- Configure instance A as the primary.
- SSH to instance B. SSH <username>@<instance_B_hostname>
- Start PostgreSQL. /<PHANTOM_HOME>/bin/phsvc start postgresql-11
- Start pgbouncer. /<PHANTOM_HOME>/bin/phsvc start pgbouncer
- Turn off primary mode phenv python /<PHANTOM_HOME>/bin/setup_warm_standby.pyc --primary-mode --off
- Start PostgreSQL.
- SSH to instance A. SSH <username>@<instance_A_hostname>
- Configure instance A as primary. phenv python /<PHANTOM_HOME>/bin/setup_warm_standby.pyc --primary-mode --configure --primary-ip <primary_ip> --standby-ip <standby_ip>
- Configure instance A as primary.
- SSH to instance B. SSH <username>@<instance_B_hostname>
- Configure instance B as the warm standby. phenv python /<PHANTOM_HOME>/bin/setup_warm_standby.pyc --standby-mode --configure --primary-ip <primary_ip> --standby-ip <standby_ip>
- Configure instance B as the warm standby.
Instance A and B are configured as a warm standby pair. Instance A is the primary, and instance B is the warm standby.
Disable warm standby | Upgrade or maintain warm standby instances |
This documentation applies to the following versions of Splunk® SOAR (On-premises): 5.0.1
Feedback submitted, thanks!