Determine if the WildFire Cluster is in a Split-Brain Condition
When the appliances in a WildFire 2-node cluster enter a split-brain condition, the service failure(s) generate warnings in the WildFire CLI and managing Panorama (where available).
- (WildFire appliance CLI only) On a WildFire appliance
admin@WF-500>show cluster membershipThe affected WildFire cluster node displays Cluster:splitbrain next to Service Summary.The following example shows a node in a 2-node WildFire cluster in a split-brain condition:
Service Summary: Cluster:splitbrain Cluster name: WF_Cluster_1 Address: 22.214.171.124 Host name: wf1 Node name: wfpc-009707000380-internal Serial number: 009707000380 Node mode: controller Server role: True HA priority: secondary Last changed: Tue, 24 Oct 2017 15:13:18 -0700 Services: wfcore signature wfpc infra Monitor status: Serf Health Status: passing Agent alive and reachable Service 'infra' check: passing Application status: global-db-service: ReadyLeader wildfire-apps-service: Ready global-queue-service: ReadyLeader wildfire-management-service: Done siggen-db: ReadyMaster Work queue status: sample anaysis queued: 0 sample anaysis running: 0 sample copy queued: 0 sample copy running: 0 Diag report: 126.96.36.199: reported leader '188.8.131.52', age 0. 184.108.40.206: local node passed sanity check.
- (Panorama only) On the Panorama appliance that is managing
the WildFire cluster:
- Select Panorama > Managed WildFire Clusters.
- In the Cluster Status column,
check for the presence of cluster [splitbrain].
This indicates that the appliance is in split-brain mode.
View WildFire Cluster Status Using the CLI
View WildFire Cluster Status Using the CLI To confirm that you WildFire cluster is running within normal operating parameters, you must execute the following show ...
show cluster membership
show cluster membership Description Show WildFire appliance cluster membership information for the cluster node or standalone WildFire appliance, including the IP address, host name, WildFire ...
show cluster all-peers
show cluster all-peers Description On a WildFire appliance cluster controller node, display the status of all WildFire appliance cluster members, including the WildFire appliance mode ...
request cluster decommission
request cluster decommission Description Remove a WildFire appliance cluster node from a cluster that has three or more member nodes. Do not use this command ...
Recover From a Split-Brain Condition
Recover From a Split-Brain Condition To resolve a split-brain condition, debug your network issues and then restore connectivity between the WildFire HA pair. WildFire appliance ...
What Causes a Split-Brain Condition?
What Causes a Split-Brain Condition? A split-brain condition is a corrective response to a single node failure of 2-node clusters, in which the WildFire high-availability ...
Configure a Cluster and Add Nodes Locally
Configure a Cluster and Add Nodes Locally When you add nodes to a cluster, the cluster automatically sets up communication between nodes based on the ...
WildFire Application States
WildFire Application States The WildFire appliance operates a series of internal applications to manage and coordinate processing of sample data. These applications and their requisite ...
Troubleshoot WildFire Split-Brain Conditions
Troubleshoot WildFire Split-Brain Conditions A WildFire 2-node HA (high availability) cluster experiences a split-brain condition when a node (or both HA peers) believes the other ...