Dear colleagues 
I have some clarification about distributed environment installation with high availability, Experts please  your help and assistance :
qradar version is 7.3.2 and could be upgraded at any time if there is requirements for that.
in fact I have an installation with one principal node to which we attached a data node , an APP host and a flow collector.
This architecture should have high availability maily for the principal node and in preference all the components
my questions are the following :
1- is there any high availability licence that should be purchase from IBM and that should be installed with activation key in the HA node. 

2-we installed a secondary infrastructure with principal node to which we attached a data node , an app host and a flow collector all similar to the primary installation, we did not installed the licence of the customer in this secondary infrastructure and we kept the default licence instead than we tried to add this secondary infrastructure to the cluster by adding the IP address of the principal node ( using the command add ha host ) we got an error message : The node is not a HA node does this mean that we need to install a HA licence activation key in it or the HA cannot be installed this way.
3- if the scenario described above is not applicable , do we need to install four HA host VM with each one with hardware capacity  similar to the corresponding primary  node from the primary infrastructure and than from each primary node we make add HA host with the IP address of the corresponding HA VM and this way we will have four clusters for high availability each cluster for one type of node separately.

thanks for your help and assistance 

------------------------------
nizar hedhili
------------------------------

HA FAQ:
1- is there any high availability licence that should be purchase from IBM and that should be installed with activation key in the HA node.
activation keys are not used any more with QRadar (non cloud environment) HA licenses are desperately needed!

2-we installed a secondary infrastructure with principal node to which we attached a data node , an app host and a flow collector all similar to the primary installation, we did not installed the licence of the customer in this secondary infrastructure and we kept the default licence instead than we tried to add this secondary infrastructure to the cluster by adding the IP address of the principal node ( using the command add ha host ) we got an error message : The node is not a HA node does this mean that we need to install a HA licence activation key in it or the HA cannot be installed this way.
This is a different approach using different licenses for disaster recovery (DR). Dont copy your original installation to your secondary infrastructure unless you want to take care of config sync and data sync yourself. Better use DR scenario and sync app. If you still want to go for real HA, please follow HA instructions for setting up an HA environment. What you are trying to setup is a DR environement which is different from HA

3- if the scenario described above is not applicable , do we need to install four HA host VM with each one with hardware capacity similar to the corresponding primary node from the primary infrastructure and than from each primary node we make add HA host with the IP address of the corresponding HA VM and this way we will have four clusters for high availability each cluster for one type of node separately
If your primary node is VM as well you can indeed do that. However there are much better ways for HA in an VM environment, e.g. snapshots. Just make sure that the bandwith and more important latency between HA hosts is high/short enough

Hope This Helps

------------------------------
[Karl] [Jaeger] [Business Partner]
[QRadar Specialist]
[pro4bizz]
[Karlsruhe] [Germany]
[4972190981722]
------------------------------