IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  Disconnecting\Removing from deployment an Offline HA Cluster

    Posted Fri January 05, 2024 11:24 AM

    Hello,
    does someone know how an offline HA cluster (a cluster made of two event processors) can be removed from the deployment?
    I tried to do in th same way as I did with single managed hosts but it is not possible, in the system and license management -> HA deployment menu the "Remove HA host" option is not active and cannot be selected.
    Could this be done from command line from console or by other means? FYI, our release is 750 up3.

    B Regards

    Davide



    ------------------------------
    Davide Salardi
    ------------------------------


  • 2.  RE: Disconnecting\Removing from deployment an Offline HA Cluster

    Posted Tue January 16, 2024 11:20 AM

    Hello Davide, 

    At present how are the servers presenting in the system and license managemnet page?

    Are they still showing as a HA Pair?

    Are they both offline?

    Are they both still reachable?

    Is it possible to bring them back into aan Active/Standby state, break HA and remove?



    ------------------------------
    Comghall Morgan
    QRadar Support Architect
    IBM
    ------------------------------



  • 3.  RE: Disconnecting\Removing from deployment an Offline HA Cluster

    Posted Wed January 17, 2024 03:20 AM

    Hello Comghan,

    I opened a support case and suppoert enginner helped us to break HA pair abd remove the MHs from the Psql database..unfortunately we cannot reconnect the host to the deployment for some time so this was the only way to achieve our goals.

    BR

    Davide



    ------------------------------
    Davide Salardi
    ------------------------------