ArcSight Express CORR Engine AE 7425 model - High Availability
As we know their is no solution given by HP ArcSight for high availability in any solution,
However, i have few queries on this regards and request all experts to assist me on this,
Let's say i configure connectors into duplex mode so that, one can send events to primary as well as HA at once. In this case if one goes down the other will take it over (No Event Loss)
Now, if i want to replicate the contents from primary to secondary (HA)? how can this operation be done?
Also, if any rule fires on primary will it fire on secondary (on HA) as well because it is config in duplex events mode? How do we stop secondary to fire any rule to avoid duplication?
.....................Again in this case will content replication can be automated?
......................Also if primary goes down will secondary can take over automatically?
Please suggest me on this regards,