Hello Community,
I would like to clarify how data accessibility works in QRadar Data Node environments.
Scenario 1:
We currently have one Console and two Data Nodes (DN1 and DN2). If one Data Node goes down (for example, DN1), will the data stored on that Data Node remain accessible during the downtime?
Scenario 2:
We are planning a two-site setup similar to an HA design:
Both sites are connected through an extended VLAN, and all 4 Data Nodes are linked to the Primary Console.
My question is:
If both Data Nodes in Site B go down, will the data that was previously stored on those Site B Data Nodes still be accessible? Or will that data remain inaccessible until the nodes come back online?
------------------------------
Abu Mussa Elahi
------------------------------