11-23-2020 12:36 AM - edited 11-23-2020 01:58 AM
Hi Team,
As far as I understood logs between MNT nodes are not synchronized. They work as active/active. All nodes in the deployment send logs to MNT nodes simultaneously. When Primary MNT goes down PAN switches to Secondary MNT and reads logs from it. Now only Secondary MNT receives logs and when Primary MNT goes up PAN switches back to Primary MNT automatically and does not see logs that happened when Primary MNT was down. The only solution to keep the log database identical is to backup operational data from Secondary MNT (with full logs) and restores it to Primary MNT. But restoring operational data causes stop services on the Primary MNT node so it will miss logs again during the restore. So what the way to keep the log database identical on the MNT nodes?
11-23-2020 01:05 AM
11-23-2020 01:56 AM
Hi,
I do not want to restore MNT logs on the other nodes only between Primary and Secondary MNT nodes to keep the log database identical.
From the book SISE 300-715:
"Upon an MnT failure, all nodes continue to send logs to the remaining MnT node so that no logs are lost. The PAN retrieves all logs and reports data from the secondary MnT node, so there is no administrative function loss, either. However, the log database is not synchronized between the primary and secondary MnT nodes; therefore, when the MnT node returns to service, a backup and restore of the monitoring node is required to keep the two MnT nodes in complete synchronization."
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide