Splunk SOAR

Customize Warm Standby Display Message

catherinelam
Explorer

Good morning! Is there a way to update the display message on the Warm Standby instance when users navigate to it?

Labels (1)
0 Karma

phanTom
SplunkTrust
SplunkTrust

@catherinelam I highly doubt it although it's probably somewhere on the system. 

My 1st question would have to be why? No-one should be going to the standby as it should be behind some DNS and/or LB that only sends traffic to the "active" box. 

If in doubt I would ask support as changing this, if possible, may cause issues with the support agreement. 

-- Hope this helps, if so consider leaving some Karma. Even better is if this fixed your issue, that you mark as a solution for others to find. Happy SOARing!! ---
0 Karma

catherinelam
Explorer

Great point about the DNS. Our concern was that, as brought up by our networking team, there might be a lag in when the DNS record gets updated during the manual switch and during that time we wanted to direct our users to the right URL, if possible. 

I'll reach out to support! It's not a high priority, but I didn't see anything in the UI. Thanks for replying 🙂

0 Karma

phanTom
SplunkTrust
SplunkTrust

Gotcha and no worries, that's what I am here for 😁

If you have an LB that can do some kind of probing for the active box then it shouldn't matter if DNS has an issue as the LB will decide which is "healthy" and the DNS record just points to the LB if that makes sense?

Not done it myself but definitely heard it a few times in the Warm/Standby conversations around automating the failover. 

-- Hope this helps, if so consider leaving some Karma. Even better is if this fixed your issue, that you mark as a solution for others to find. Happy SOARing!! ---
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Get Agentic with Splunk Lantern: Connect to Cisco Cloud Control, Transform ...

Splunk Lantern is Splunk’s customer success center that provides practical guidance from Splunk experts on key ...

July Community Events: Master ITSI 5.0 & Automate Splunk

Struggling with alert fatigue or feeling like you're spending more time on infrastructure maintenance than ...

New Release of Federated Search: Bringing Splunk Analytics to More of Your Data

Organizations today are generating more data than ever and storing it across cloud object stores, data lakes, ...