topic Re: Stealthwatch SMC failover in Security Analytics

Stealthwatch SMC failover

josimaru85 — Sat, 09 May 2020 00:27:08 GMT

Hi Team

I trying configure StealthWatch Failure on Two SMC Primary and secondary, I follow all steps under the Online help tool.

I have Trial License full, and start Failure mode by Seconday SMC:

Both SMC* Have Trial License OK

I start Failure test under SMC2 Secondary Console***

Under SMC Primary console Didnt Show me anything about primary mode

Under Secondary I see that Secondary change right but didnt stablish with Primary

Someone already get this issue?

Re: Stealthwatch SMC failover

kyoshiik — Sun, 10 May 2020 12:12:38 GMT

I don’t fully understand your failover scenario but it looks something wrong not shown primary SMC in secondary SMC UI.

So please contact TAC team, they will help correct failover procedure and if this issue was made by a defect, they also cover it.

Re: Stealthwatch SMC failover

josimaru85 — Mon, 11 May 2020 11:26:19 GMT

Simple Failover scenario!

Re: Stealthwatch SMC failover

kyoshiik — Mon, 11 May 2020 17:50:54 GMT

So, you shutdown SMC1(or disconnect SMC1 from network) and SMC2 is promoted as primary. So turn on(reconnect) SMC1 and you promote SMC1 manually in UI as primary for fail back if you want SMC1 to be primary. This should work.

If you still have an issue, please contact TAC team.

Re: Stealthwatch SMC failover

josimaru85 — Mon, 11 May 2020 23:36:21 GMT

Hi Friend I tryied today again and follow your tips, but even when I shutdown SMC1 and try manually upgrade SMC2 on Primary didnt work.

SMC2 wont able tu push FC and devices from SMC1

Re: Stealthwatch SMC failover

kyoshiik — Tue, 12 May 2020 15:06:52 GMT

Please open TAC case. It looks something wrong.