<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: ClusterXL Failover. in Firewall and Security Management</title>
    <link>https://community.checkpoint.com/t5/Firewall-and-Security-Management/ClusterXL-Failover/m-p/191751#M35366</link>
    <description>&lt;P&gt;Andy,&lt;/P&gt;
&lt;P&gt;I found this, with the command you recommended.&lt;/P&gt;
&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="CPHA1.png" style="width: 999px;"&gt;&lt;img src="https://community.checkpoint.com/t5/image/serverpage/image-id/22355i51AB70DE367B1CE7/image-size/large?v=v2&amp;amp;px=999" role="button" title="CPHA1.png" alt="CPHA1.png" /&gt;&lt;/span&gt;&lt;/P&gt;
&lt;P&gt;I have the impression, and I am almost sure, that it was a manual "shutdown" of the equipment, either it was disconnected from the mains, or something similar.&lt;/P&gt;
&lt;P&gt;By the way, in your command grep -i DOWN /var/log/messages* ... how can you filter the date only for today, 06September?&lt;BR /&gt;&lt;BR /&gt;Cheers, &lt;span class="lia-unicode-emoji" title=":slightly_smiling_face:"&gt;🙂&lt;/span&gt;&lt;/P&gt;</description>
    <pubDate>Wed, 06 Sep 2023 16:49:34 GMT</pubDate>
    <dc:creator>Matlu</dc:creator>
    <dc:date>2023-09-06T16:49:34Z</dc:date>
    <item>
      <title>ClusterXL Failover.</title>
      <link>https://community.checkpoint.com/t5/Firewall-and-Security-Management/ClusterXL-Failover/m-p/191746#M35363</link>
      <description>&lt;P&gt;ClusterXL Failover.&lt;/P&gt;
&lt;P&gt;Hello,&lt;/P&gt;
&lt;P&gt;Is there any "practical" way to validate the reason "why" our ClusterXL did a failover?&lt;/P&gt;
&lt;P&gt;We want to rule out that it was a CPU problem and / or equipment configuration.&lt;/P&gt;
&lt;P&gt;The cphaprob state, shows the following.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="CPHA.png" style="width: 999px;"&gt;&lt;img src="https://community.checkpoint.com/t5/image/serverpage/image-id/22354i471234186EDC4F17/image-size/large?v=v2&amp;amp;px=999" role="button" title="CPHA.png" alt="CPHA.png" /&gt;&lt;/span&gt;&lt;/P&gt;
&lt;P&gt;Is there any other documentation to check in these "situations"?&lt;/P&gt;
&lt;P&gt;Greetings.&lt;/P&gt;</description>
      <pubDate>Wed, 06 Sep 2023 16:25:39 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/Firewall-and-Security-Management/ClusterXL-Failover/m-p/191746#M35363</guid>
      <dc:creator>Matlu</dc:creator>
      <dc:date>2023-09-06T16:25:39Z</dc:date>
    </item>
    <item>
      <title>Re: ClusterXL Failover.</title>
      <link>https://community.checkpoint.com/t5/Firewall-and-Security-Management/ClusterXL-Failover/m-p/191747#M35364</link>
      <description>&lt;P&gt;Yes, there are ways to tell...&lt;/P&gt;
&lt;P&gt;Btw, I would NOT be using routable IPs for sync, as 3.3.3.x is Amazon range...I always tell customers to use 169.254.x.x range&lt;/P&gt;
&lt;P&gt;Anyway, having said that, I would run below and look for messages in proper date/time span&lt;/P&gt;
&lt;P&gt;from expert -&amp;gt; grep -i DOWN /var/log/messages*&lt;/P&gt;
&lt;P&gt;Andy&lt;/P&gt;</description>
      <pubDate>Wed, 06 Sep 2023 16:30:55 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/Firewall-and-Security-Management/ClusterXL-Failover/m-p/191747#M35364</guid>
      <dc:creator>the_rock</dc:creator>
      <dc:date>2023-09-06T16:30:55Z</dc:date>
    </item>
    <item>
      <title>Re: ClusterXL Failover.</title>
      <link>https://community.checkpoint.com/t5/Firewall-and-Security-Management/ClusterXL-Failover/m-p/191749#M35365</link>
      <description>&lt;P&gt;cphaprob show_failover&lt;/P&gt;
&lt;P&gt;This shows a log of up to 20 failovers going back to the last time services were restarted. It doesn't always give a lot of detail. It also doesn't contain state changes which did not result in a failover (like standby to down).&lt;/P&gt;</description>
      <pubDate>Wed, 06 Sep 2023 16:45:52 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/Firewall-and-Security-Management/ClusterXL-Failover/m-p/191749#M35365</guid>
      <dc:creator>Bob_Zimmerman</dc:creator>
      <dc:date>2023-09-06T16:45:52Z</dc:date>
    </item>
    <item>
      <title>Re: ClusterXL Failover.</title>
      <link>https://community.checkpoint.com/t5/Firewall-and-Security-Management/ClusterXL-Failover/m-p/191751#M35366</link>
      <description>&lt;P&gt;Andy,&lt;/P&gt;
&lt;P&gt;I found this, with the command you recommended.&lt;/P&gt;
&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="CPHA1.png" style="width: 999px;"&gt;&lt;img src="https://community.checkpoint.com/t5/image/serverpage/image-id/22355i51AB70DE367B1CE7/image-size/large?v=v2&amp;amp;px=999" role="button" title="CPHA1.png" alt="CPHA1.png" /&gt;&lt;/span&gt;&lt;/P&gt;
&lt;P&gt;I have the impression, and I am almost sure, that it was a manual "shutdown" of the equipment, either it was disconnected from the mains, or something similar.&lt;/P&gt;
&lt;P&gt;By the way, in your command grep -i DOWN /var/log/messages* ... how can you filter the date only for today, 06September?&lt;BR /&gt;&lt;BR /&gt;Cheers, &lt;span class="lia-unicode-emoji" title=":slightly_smiling_face:"&gt;🙂&lt;/span&gt;&lt;/P&gt;</description>
      <pubDate>Wed, 06 Sep 2023 16:49:34 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/Firewall-and-Security-Management/ClusterXL-Failover/m-p/191751#M35366</guid>
      <dc:creator>Matlu</dc:creator>
      <dc:date>2023-09-06T16:49:34Z</dc:date>
    </item>
    <item>
      <title>Re: ClusterXL Failover.</title>
      <link>https://community.checkpoint.com/t5/Firewall-and-Security-Management/ClusterXL-Failover/m-p/191753#M35367</link>
      <description>&lt;P&gt;There ya go bro, thats your answer : - )&lt;/P&gt;
&lt;P&gt;Not sure if you can filter for specific date, will check.&lt;/P&gt;
&lt;P&gt;Andy&lt;/P&gt;</description>
      <pubDate>Wed, 06 Sep 2023 16:55:01 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/Firewall-and-Security-Management/ClusterXL-Failover/m-p/191753#M35367</guid>
      <dc:creator>the_rock</dc:creator>
      <dc:date>2023-09-06T16:55:01Z</dc:date>
    </item>
    <item>
      <title>Re: ClusterXL Failover.</title>
      <link>https://community.checkpoint.com/t5/Firewall-and-Security-Management/ClusterXL-Failover/m-p/191754#M35368</link>
      <description>&lt;P&gt;Thanks for that, totally forgot about the command.&lt;/P&gt;
&lt;P&gt;Andy&lt;/P&gt;</description>
      <pubDate>Wed, 06 Sep 2023 16:55:41 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/Firewall-and-Security-Management/ClusterXL-Failover/m-p/191754#M35368</guid>
      <dc:creator>the_rock</dc:creator>
      <dc:date>2023-09-06T16:55:41Z</dc:date>
    </item>
    <item>
      <title>Re: ClusterXL Failover.</title>
      <link>https://community.checkpoint.com/t5/Firewall-and-Security-Management/ClusterXL-Failover/m-p/191757#M35369</link>
      <description>&lt;P&gt;Hello,&lt;/P&gt;
&lt;P&gt;This is a bit of a silly question, but when you apply the command, like:&lt;/P&gt;
&lt;P&gt;cphaprob show_failover, the result says something like.&lt;BR /&gt;&lt;BR /&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="CPHA2.png" style="width: 913px;"&gt;&lt;img src="https://community.checkpoint.com/t5/image/serverpage/image-id/22356i03255F2F0FF80B32/image-size/large?v=v2&amp;amp;px=999" role="button" title="CPHA2.png" alt="CPHA2.png" /&gt;&lt;/span&gt;&lt;/P&gt;
&lt;P&gt;"member2 -&amp;gt; member1"&lt;/P&gt;
&lt;P&gt;It's silly the doubt, but by "member2" do you mean, the same computer, where at that moment, I'm running the command?&lt;/P&gt;
&lt;P&gt;Greetings.&lt;/P&gt;</description>
      <pubDate>Wed, 06 Sep 2023 18:01:54 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/Firewall-and-Security-Management/ClusterXL-Failover/m-p/191757#M35369</guid>
      <dc:creator>Matlu</dc:creator>
      <dc:date>2023-09-06T18:01:54Z</dc:date>
    </item>
    <item>
      <title>Re: ClusterXL Failover.</title>
      <link>https://community.checkpoint.com/t5/Firewall-and-Security-Management/ClusterXL-Failover/m-p/191759#M35370</link>
      <description>&lt;P&gt;It would show you exact same output on both, but no matter the context, it would look at member 2 as current standby and member 1 as active.&lt;/P&gt;
&lt;P&gt;Andy&lt;/P&gt;</description>
      <pubDate>Wed, 06 Sep 2023 18:12:19 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/Firewall-and-Security-Management/ClusterXL-Failover/m-p/191759#M35370</guid>
      <dc:creator>the_rock</dc:creator>
      <dc:date>2023-09-06T18:12:19Z</dc:date>
    </item>
  </channel>
</rss>

