Splunk SOAR

Customize Warm Standby Display Message

catherinelam
Explorer

Good morning! Is there a way to update the display message on the Warm Standby instance when users navigate to it?

Labels (1)
0 Karma

phanTom
SplunkTrust
SplunkTrust

@catherinelam I highly doubt it although it's probably somewhere on the system. 

My 1st question would have to be why? No-one should be going to the standby as it should be behind some DNS and/or LB that only sends traffic to the "active" box. 

If in doubt I would ask support as changing this, if possible, may cause issues with the support agreement. 

-- Hope this helps, if so consider leaving some Karma. Even better is if this fixed your issue, that you mark as a solution for others to find. Happy SOARing!! ---
0 Karma

catherinelam
Explorer

Great point about the DNS. Our concern was that, as brought up by our networking team, there might be a lag in when the DNS record gets updated during the manual switch and during that time we wanted to direct our users to the right URL, if possible. 

I'll reach out to support! It's not a high priority, but I didn't see anything in the UI. Thanks for replying 🙂

0 Karma

phanTom
SplunkTrust
SplunkTrust

Gotcha and no worries, that's what I am here for 😁

If you have an LB that can do some kind of probing for the active box then it shouldn't matter if DNS has an issue as the LB will decide which is "healthy" and the DNS record just points to the LB if that makes sense?

Not done it myself but definitely heard it a few times in the Warm/Standby conversations around automating the failover. 

-- Hope this helps, if so consider leaving some Karma. Even better is if this fixed your issue, that you mark as a solution for others to find. Happy SOARing!! ---
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Quick connection discovery mode for forwarders

When a Splunk forwarder loses connectivity to its indexers, it does not always reconnect immediately. In many ...

Build and Launch AI Agents from Your Splunk Workflows

  Register We’ve all been there: juggling alerts, runbooks, and endless manual searches. What if you could ...

Splunk Cloud Application Management in Terraform

Register   On Tuesday, August 4 at 11AM PDT / 2PM EDT, we’re diving into how you can bring Infrastructure as ...