Splunk SOAR

Customize Warm Standby Display Message

catherinelam
Explorer

Good morning! Is there a way to update the display message on the Warm Standby instance when users navigate to it?

Labels (1)
0 Karma

phanTom
SplunkTrust
SplunkTrust

@catherinelam I highly doubt it although it's probably somewhere on the system. 

My 1st question would have to be why? No-one should be going to the standby as it should be behind some DNS and/or LB that only sends traffic to the "active" box. 

If in doubt I would ask support as changing this, if possible, may cause issues with the support agreement. 

0 Karma

catherinelam
Explorer

Great point about the DNS. Our concern was that, as brought up by our networking team, there might be a lag in when the DNS record gets updated during the manual switch and during that time we wanted to direct our users to the right URL, if possible. 

I'll reach out to support! It's not a high priority, but I didn't see anything in the UI. Thanks for replying 🙂

0 Karma

phanTom
SplunkTrust
SplunkTrust

Gotcha and no worries, that's what I am here for 😁

If you have an LB that can do some kind of probing for the active box then it shouldn't matter if DNS has an issue as the LB will decide which is "healthy" and the DNS record just points to the LB if that makes sense?

Not done it myself but definitely heard it a few times in the Warm/Standby conversations around automating the failover. 

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...