Description

It has been observed in JSA 7.5.0 UP8 that the HA status is not properly displayed in System and License Management, or accurately reported by ha_manager/CSTATE while data synchronization is in progress. This can allow for HA failover procedures to be initiated during data synchronization, which can result in data loss.

Symptoms

Missing synchronization status in System and License Management

Unexpected HA failovers

Solution

  1. After you upgrade to JSA7.5.0 Update Package 8, if you have HA pairs, download the following utility: HA_DRBD_Monitor_Script Bundle
  2. Use SSH or an SFTP client to copy the file ha_drbd_functions.sh to the /opt/qradar/ha/bin/ directory on the primary host.
  3. Type the following command to SCP the file to your HA secondary:
    # scp /opt/qradar/ha/bin/ha_drbd_functions.sh <host ip>:/opt/qradar/ha/bin/ha_drbd_functions.sh

  4. On both the primary and secondary appliances, run the following command:
    # /opt/qradar/ha/init.d/ha_drbd_monitor restart

  5. Wait for the tool to complete.
  6. Confirm the status of DRBD, replacing with your system's hostname (Note: "cat /proc/drbd" has been deprecated and does not work in UP8): 
    # cat /sys/kernel/debug/drbd/resources/store/connections/<hostname>/0/proc_drbd

  7. Repeat this procedure for all HA pairs in the deployment.

Permanent fix :

This issue is resolved in JSA 7.5.0 Update Pack 8 Interim Fix 3 (Build 20240527155707). For more information, please see the release notes available at JSA 7.5.0 UP8 IF03 Release notes.

Modification History

2024-05-09 : Article Created