This is the error I get when trying to start SOAR on the Warmstandby:
Splunk SOAR is in standby. Starting all services except automation daemons
Starting Database server (PostgreSQL): [ OK ]
Starting Connection pooler (PgBouncer): [ OK ]
Checking database connectivity: [ OK ]
Checking component versions: [ OK ]
Starting Supervisord: [ OK ]
Starting Splunk SOAR daemons: [ OK ]
Checking Supervisord processes: [FAILED]
add_to_es_index failed to start. Check /opt/soar/var/log/phantom/add-es-index-stderr.log for more info.
Splunk SOAR startup failed.
I saw there is a known issue for this: https://docs.splunk.com/Documentation/SOARonprem/6.3.1/ReleaseNotes/KnownIssues
| 2024-12-03 | PSAAS-20901 | supervisord failing to start on warm standby instance |
Does anyone have a workaround or fix for this issue?
