High Availability Setup Guide for ArcSight ESM Manager on Microsoft Cluster Services (MSCS) in a Windows Server 2012 R2 Failover Cluster

Summary:

This document outlines a step-by-step guide for installing ArcSight ESM Manager on a High Availability (HA) cluster using Microsoft Cluster Services (MSCS). The installation assumes that the reader has already set up an MSCS HA cluster. The process involves copying the ArcSight Manager installer to a designated drive, configuring local administrator groups, and running the installation executable. Users must provide details such as hostname, port, license file path, Java heap memory size, SSL key pair options, database server information, authentication type, built-in admin account credentials, desired packages for installation, and SMTP server settings for notification during the installation process. The document also includes instructions for configuring the ArcSight Manager within a clustered environment, including setting up and configuring an ArcSight Manager within a Windows Cluster environment.

Details:

This document provides a guide for installing ArcSight ESM Manager on a High Availability (HA) cluster using Microsoft Cluster Services (MSCS). It is assumed that the reader has already set up an MSCS HA cluster. The installation involves copying the ArcSight Manager installer to a designated drive, configuring local administrator groups, and running the installation executable. During the installation process, users are required to provide details such as hostname, port, license file path, Java heap memory size, SSL key pair options, database server information, authentication type, built-in admin account credentials, desired packages for installation, and SMTP server settings for notification. This process involves installing and configuring an ArcSight Manager on a single node within a Windows Server 2012 R2 Failover Cluster. Here’s a summary of the steps: 1. **Install ArcSight Web**: Enter details for ArcSight Web, click Next, then Finish. 2. **Configure Server Name and Port**: On the next screen, enter the server name and port number, then click Next. 3. **Asset Creation**: Choose whether to allow auto asset creation, then click Next. 4. **Install Manager Server**: Select "Install the ArcSight Manager 4.0.1.5369.0 Service", click Next, and then Finish. 5. **Set Service Account**: Set the ArcSight Manager service to run as `\arcsight` (ensure the domain account exists). 6. **Configure MS Cluster Admin Tool**: Move resource groups to the other node in the cluster by selecting each group and choosing "Move Group". 7. **Rename Configuration File**: On the “B” node, rename `agent.wrapper.conf` to `agent.wrapper.conf.a_node`. 8. **Install Manager Service on Node B**: Run `arcsight managersvc install` in the command prompt and navigate to `$ARCSIGHT_HOME\bin`. 9. **Verify Service Installation**: Open Computer Management, view Services, and ensure the Manager service is listed. 10. **Configure Service Settings**: Set the ArcSight service on Node B to run as `\arcsight`, set it to Manual, and allow cluster control over starting/stopping. 11. **Create Cluster Resource**: In the Cluster Admin tool, create a new cluster resource named "ArcSight Manager" with the Generic Service type. These steps ensure that the ArcSight Manager is properly installed and configured within a clustered environment, allowing for failover between nodes. The process described involves setting up and configuring an ArcSight Manager within a Windows Cluster environment. Here’s a step-by-step breakdown of what needs to be done: 1. **Select Resource Group**: Choose the resource group that contains the shared disk, which is likely where the manager was initially installed. This selection helps in managing the resources more efficiently and ensures proper functioning. 2. **Run Resource Monitor**: Open the Resource Monitor and select the option to run this particular resource in a separate monitor. This step isolates management of the ArcSight Manager service from other potential cluster services, ensuring that its monitoring is streamlined. 3. **Define Possible Owners**: Enter all nodes within the cluster as possible owners for this shared disk dependent resource. This configuration ensures that each node recognizes and manages the shared disk according to its role in the network. 4. **Enter Shared Disk Information**: Specify the name of the shared disk where the ArcSight Manager is installed. By doing so, you ensure that the disk is mounted before starting the Manager service, which is crucial for proper functioning. 5. **Register Service Name**: Enter the exact registered service name within Windows Services (default might be ArcSightManager4.0.1.5369.0). This step verifies and registers the service to ensure it operates correctly under cluster management. 6. **Finish Configuration**: Once all necessary information has been entered, click 'Finish'. You will now see a new resource named ArcSight Manager installed within the previously selected resource group in the Cluster Admin Tool. 7. **Manage Services**: Right-click on the newly created ArcSight Manager resource and select to start it. This activates the service across all nodes in the cluster, making sure that each node can communicate with the manager. 8. **Cluster Responsiveness**: The configuration ensures that when a resource group fails or undergoes planned failover, the ArcSight Manager service will also fail over seamlessly between nodes. Once the shared disk is successfully mounted on another node post-failover, the Manager service restarts automatically, maintaining system continuity and responsiveness. This setup not only facilitates efficient management of the ArcSight Manager but also ensures high availability and fault tolerance within a Windows Cluster environment.

Disclaimer:

The content in this post is for informational and educational purposes only. It may reference technologies, configurations, or products that are outdated or no longer supported. If there are any comments or feedback, kindly leave a message and will be responded.