Issue description
The virtual IP does not function properly in the High Availability (HA) setup. This impacts EventLog Analyzer access and syslog log collection.
Possible causes
- Wrong interface name in StartHA.vbs or StopHA.vbs
- Virtual IP isn’t in the same network range or subnet
- Syslog devices are not set to use the virtual IP
- Missing license files on the secondary server
- Elasticsearch is not configured for HA
What to check first
- Is the interface name correct in StartHA.vbs and StopHA.vbs?
- Is the virtual IP in the same subnet?
- Were license files copied from primary to secondary?
Resolution steps
Step 1: Confirm the interface name in the scripts is correct.
Step 2: Make sure the virtual IP is in the same subnet.
Step 3: Verify syslog devices are sending logs to the virtual IP.
Step 4: Copy these files from primary to secondary:
- <EventLog Analyzer Home>\lib\petinfo.dat
- <EventLog Analyzer Home>\lib\AdventNetLicense.xml
Step 5: Check Elasticsearch is configured for HA.
Validation and testing
- Ping the virtual IP
- Open EventLog Analyzer using the virtual IP
- Check if syslog logs are received
Tips
- Make sure settings match on both servers