Change the role of the previous primary system to be the standby system
After you perform the failover to the standby Splunk UBA system, make it the primary system, and verify that it is running normally, perform the following tasks restore the original system that became unavailable and change its role to be the standby system:
- Restore the system that failed (for example, system A).
- Follow the steps in Set up the standby Splunk UBA system to set up system A as the standby system.
When System A is changed to be standby system, the data in system B is synchronized to system A.
This documentation applies to the following versions of Splunk® User Behavior Analytics: 5.0.4, 5.0.4.1, 5.1.0
Feedback submitted, thanks!