Active high-availability (HA) system failure

Explanation

The active system cannot communicate with the standby system because the active system is unresponsive or failed. The standby system takes over operations from the failed active system.

User response

Review the following resolutions:

• Inspect the active HA appliance to determine whether it is powered down or experienced a hardware failure.
• If the active system is the primary HA, restore the active system.

  Click the Admin tab and click System and License Management. From the High Availability menu, select the Restore System option.

• Review the /var/log/qradar.log file on the standby appliance to determine the cause of the failure.
• Use the ping command to check the communication between the active and standby system.
• Check the switch that connects the active and standby HA appliances.

  Verify the IPtables on the active and standby appliances.