Storage Admin Hub
Troubleshooting · Operational checklist

Investigate HA takeover or giveback alerts

Confirm ownership, hardware health, and client service before action.

Scope

HA state assessment checklist · platform-specific recovery procedure required

Scenario

Example: node B has taken over node A. A takeover can keep data available, but the reason must be understood before giveback.

About the command and output examples

Names, addresses and results are illustrative. Commands have not been executed against a live storage system or SAN switch for this publication. Confirm syntax and compatibility for your release, then rehearse in an approved lab. Existing-data recovery and destructive changes need an environment-specific plan. Read the editorial standards.

01Establish the state

  1. Capture node health, HA state, current aggregate ownership, LIF placement, affected applications, EMS timeline and planned maintenance.
  2. Determine whether the takeover was operator-initiated, automatic due to a fault, or incomplete. Check power, interconnect, storage and network alerts.
Read-only investigation
cluster show
storage failover show
system health alert show
event log show -severity ERROR

02Decide the next action

  1. If partner hardware is faulted or aggregates are not healthy, escalate and repair before giveback. Do not force a giveback to clear an alert.
  2. If the cause is resolved, follow the exact platform and ONTAP giveback procedure in an approved window. Monitor client paths and LIFs during the transition.
Acceptance check

Partner eligible, underlying fault resolved, and recovery procedure approved.

03Validate recovery

  1. Check both nodes and HA readiness, aggregate and LIF placement, volumes, SAN paths, application transactions, and new EMS messages.
  2. Record the initiating event and preventive change.
Acceptance check

Both nodes healthy and HA ready; client access and replication normal.

04Timeline worksheet: availability and repair are different milestones

Illustrative case: a power fault triggers takeover and clients continue normally. That demonstrates continued service, but it does not resolve the faulty PSU/feed. A giveback before repair can repeat the incident. In another case, a veto names a specific blocker; bypassing it because the node looks online discards useful protection evidence.

Use actual timestamps; do not infer the initiating fault from the last visible alert
Time/eventRecordDecision
Before takeoverNormal owner, paths and current maintenanceWhat was expected to change?
Initiating faultEMS/console/hardware eventWhich component requires repair?
TakeoverPartner and aggregate ownershipDid service continue through surviving paths?
Partner recoveryBoot/health and fault resolutionIs returning ownership actually safe?
Giveback readiness/vetoExact supported readiness resultProceed through matching procedure or escalate.
  1. Capture current ownership and service state before taking action. Check that the survivor has capacity and paths to sustain the workload during repair.
  2. Resolve the initiating fault and use the supported readiness procedure for the exact platform and release. Preserve any veto text and involve support when its cause is unclear.
  3. During a controlled giveback, monitor host/client transactions and paths as well as storage state. Compare the final placement with the intended design.
Acceptance check

The repair cause is resolved, both nodes are ready for future HA events, and application service is verified after returning ownership.

Official references and further reading

Choose the matching release in the vendor documentation before using a command or design. References open on the publisher’s website; linked material remains with its publisher.