HA failover event sequence

IBM® QRadar® initiates a sequence of events when a primary high-availability (HA) host fails.

During failover, the secondary HA host assumes the responsibilities of the primary HA host. The following actions in sequence are completed in sequence:
  1. If configured, external shared storage devices are detected and the file systems are mounted. For more information, see the IBM Security Offboard Storage Guide.
  2. A management interface network alias is created, for example, the network alias for eth0 is eth0:0.
  3. The cluster virtual IP address is assigned to the network alias.
  4. All QRadar services are started.
  5. The secondary HA host connects to the console and downloads configuration files.