Schedule a planned disaster recovery for your Splunk Cloud Platform environment

Up to twice a year, you can schedule a planned failover of your Splunk Cloud Platform environment when it is integrated with cross-region disaster recovery (CRDR). Performing this planned failover lets you confirm that the service is performing as you expect and lets you test processes to ensure that your data collection and forwarding infrastructure sends data to your Splunk Cloud Platform environment properly even when it is active in the secondary cloud service provider region.

Do not use this procedure to report an actual disaster scenario. You must give Splunk three business days' notice for planned disaster recovery failovers.

Requirements for performing a planned disaster recovery

Meet the following requirements to perform a planned disaster recovery for your Splunk Cloud Platform environment:

• Your Splunk Cloud Platform environment must have CRDR implemented and functional
• The environment must not be within a maintenance window or going through an upgrade
• You must give Splunk three business days' notice to schedule the planned failover
• Your Splunk Cloud Platform environment must revert back to the standard production region within 2 weeks of the planned failover.

Schedule a planned disaster recovery

To schedule a planned disaster recovery, perform the following steps:

1. Visit the Splunk Support Portal.
2. In the I need help with... section, select Cloud change request.
3. Select Standard configuration.
4. In the Conf file name field, enter "CRDR".
5. In the Description field, enter the following text:

   Request for planned failover testing: Please schedule failover and failback of my Splunk Cloud Platform instance during the following time.
   
   Planned Failover
   Maintenance Window: {Time window, Timezone}
   
   Planned Failback
   Maintenance Window: {Time window, Timezone}
   

6. Select Submit.

After Splunk Support receives the request, they'll contact you to schedule the appropriate maintenance windows to perform the planned disaster recovery.