db_instance

'dataStorageDestinationDir'

[Example]

db_instance = '/database1/inst1'

Specify using single quotation marks (') to enclose the data storage destination directory used to identify the monitoring target instance.

Use ASCII characters to specify this parameter.

target_db

postgres or template1

Specify the name of the database to be connected to the database instance.

The default is "postgres".

db_instance_username

'usernameToConnectToDbInstance'

Specify the username to connect to the database instance.

Use ASCII characters to specify this parameter.

Specify this parameter if the database administrator user is different from the operating system user who starts Mirroring Controller.

Enclose the username of the database superuser in single quotation marks (').

The maximum length of the username is 63 bytes.

The default is the operating system user who starts Mirroring Controller.

db_instance_password

'passwordOfInstanceAdminUser'

Specify the password used when Mirroring Controller connects to a database instance, enclosed in single quotation marks (').

Use ASCII characters to specify this parameter.

If password authentication is performed, you must specify this parameter in the settings used when Mirroring Controller connects to a database instance.

If you specify this parameter when password authentication is not performed, the parameter will be ignored.

If the specified value of this parameter includes ' or \, write \' or \\, respectively.

enable_hash_in_password

on or off

Specify on to treat the # in the db_instance_password specification as a password character, or off to treat it as a comment.

The default is "off".

core_file_path

'coreFileOutputDir'

Specify the directory to which the core file is to be output, enclosed in single quotation marks (').

Use ASCII characters to specify this parameter.

If this parameter is omitted, it will be assumed that the Mirroring Controller management directory was specified.

syslog_facility

Specify LOCAL0, LOCAL1, LOCAL2, LOCAL3, LOCAL4, LOCAL5, LOCAL6, or LOCAL7.

When the import of logs to the syslog is enabled, the value of this parameter will be used for "facility" of the syslog.

The default is "LOCAL0".

syslog_ident (*1)

'programName'

Specify using single quotation marks (') to enclose the program name used to identify the Mirroring Controller message in the system log.

Use ASCII characters excluding spaces to specify this parameter.

The default is 'MirroringControllerOpen'.

remote_call_timeout

Admin communication timeout

Specify the timeout value (milliseconds) of the Mirroring Controller agent process for communication between servers.

Specify a value between 0 and 2147483647 to be less than the operation system TCP connection timeout (*2).

In addition, when using the Mirroring Controller arbitrage process, fencing commands, and state transition commands, specify a value that is greater than the sum of the timeout values (*3).

The value 0 indicates that there is no timeout limit.

The default is 70000 milliseconds (70 seconds).

agent_alive_timeout

Timeout for Mirroring Controller process heartbeat monitoring (seconds)

If there is no response for at least the number of seconds specified, the Mirroring Controller process is restarted.

Specify 0 or a value between 2 and 2147483647. The value 0 indicates that there is no timeout limit.

The default is 0 seconds.

heartbeat_error_action

Operation when a heartbeat abnormality is detected using operating system or server heartbeat monitoring

arbitration: Perform automatic degradation using the arbitration server.

command: Call a user exit to determine degradation, and perform automatic degradation if required.

message: Notify messages.

fallback: Perform automatic degradation unconditionally.

The default is "arbitration".

Set the same value on the primary server and standby server.

heartbeat_interval

Interval time for abnormality monitoring during heartbeat monitoring of the operating system or server (milliseconds)

Abnormality monitoring of the operating system or server is performed at the interval specified in heartbeat_interval.

If an error is detected, operation will conform to the value specified for heartbeat_error_action. If "arbitration" is specified in heartbeat_error_action, the error detection time during monitoring of the operating system or server becomes longer than when the arbitration server is not used, by up to the value specified for arbitration_timeout.

Specify a value between 1 and 2147483647.

The specified value is used as the default for db_instance_check_interval and disk_check_interval.

The default is 800 milliseconds.

heartbeat_timeout

Timeout for abnormality monitoring during heartbeat monitoring of the operating system or server (seconds)

If there is no response for at least the number of seconds specified, it will be assumed that an error has occurred that requires the primary server to be switched, or the standby server to be disconnected.

If an error is detected, operation will conform to the value specified for heartbeat_error_action. If "arbitration" is specified in heartbeat_error_action, the error detection time during monitoring of the operating system or server becomes longer than when the arbitration server is not used, by up to the value specified for arbitration_timeout.

Specify a value between 1 and 2147483647.

The specified value is used as the default for db_instance_check_timeout.

The default is 1 second.

heartbeat_retry

Number of retries for abnormality monitoring during heartbeat monitoring of the operating system or server (number of times)

Specify the number of retries to be performed when an error has been detected that requires the primary server to be switched, or the standby server to be disconnected. If an error is detected in succession more than the specified number of times, switch or disconnection will be performed.

If an error is detected, operation will conform to the value specified for heartbeat_error_action. If "arbitration" is specified in heartbeat_error_action, the error detection time during monitoring of the operating system or server becomes longer than when the arbitration server is not used, by up to the value specified for arbitration_timeout.

Specify a value between 0 and 2147483647.

The specified value is used as the default for db_instance_check_retry and disk_check_retry.

The default is 2 times.

db_instance_check_interval

Database process heartbeat monitoring interval (milliseconds)

Heartbeat monitoring of the database process is performed at the interval specified in db_instance_check_interval.

This parameter setting is also used for abnormality monitoring of streaming replication.

Specify a value between 1 and 2147483647.

The default is the value set for heartbeat_interval.

db_instance_check_timeout

Database process heartbeat monitoring timeout (seconds)

If there is no response for at least the number of seconds specified, it will be assumed that an error has occurred that requires the primary server to be switched, or the standby server to be disconnected.

Specify a value between 1 and 2147483647.

The default is the value set for heartbeat_timeout.

db_instance_check_retry

Number of retries for database process heartbeat monitoring (number of times)

Specify the number of retries to be performed when an error has been detected that requires the primary server to be switched, or the standby server to be disconnected. If an error is detected in succession more than the specified number of times, switch or disconnection will be performed. However, if it detects that the database process is down, it will immediately switch or disconnect regardless of the setting of this parameter.

This parameter setting is also used for abnormality monitoring of streaming replication.

Specify a value between 0 and 2147483647.

The default number of retries is the value set for heartbeat_retry.

db_instance_timeout_action

none, message, or failover

Specify the behavior for no-response monitoring of the instance.

none: Do not perform no-response monitoring.

message: Notify messages if an error is detected during no-response monitoring.

failover: Perform automatic degradation if an error is detected during no-response monitoring.

The default is "failover".

disk_check_interval

Interval time for disk abnormality monitoring (milliseconds)

Abnormality monitoring of disk failure is performed at the interval specified in disk_check_interval. If the file cannot be created, it will be assumed that an error has occurred that requires the primary server to be switched, or the standby server to be disconnected.

Specify a value between 1 and 2147483647. Set a value larger than the disk access time.

The default is the value set for heartbeat_interval.

disk_check_retry

Number of retries for disk abnormality monitoring (number of times)

Specify the number of retries to be performed when an error has been detected that requires the primary server to be switched, or the standby server to be disconnected.

If an error is detected in succession more than the specified number of times, switch or disconnection will be performed.

Specify a value between 0 and 2147483647.

The default number of retries is the value set for heartbeat_retry.

disk_check_timeout

Abnormality monitoring timeout time (seconds)

The time allowed from the start time of the next disk_check_interval after a disk error occurs until the error is determined to be due to timeout.

To disconnect the standby server when a disk error due to this timeout is detected on the standby server, set shutdown_detached_synchronous_standby to on.

The default is 2147483.

Specify an integer between 0 and 2147483.

disk_check_max_threads

Upper limit on the number of threads used for abnormality monitoring

Upper limit on the number of threads for disk monitoring.

The default is the number of processors available to the JVM)

Specify an integer between 1 and 2147483647, but setting a value greater than the threads available on the machine may result in a system error.

When you run the mc_ctl status command separately from the monitoring process, each mc_ctl status temporarily uses the same number of threads as the monitoring process. When setting disk_check_max_threads, consider the machine's thread limit, the number of table spaces you plan to use, and the number of mc_ctl status commands that may be executed at the same time.

tablespace_directory_error_action

message or failover

Specify the behavior to be implemented if an error is detected in the tablespace storage directory.

message: Notify messages.

failover: Perform automatic degradation.

The default is "failover".

arbiter_alive_interval

Interval time for monitoring connection to the Mirroring Controller arbitration process (milliseconds)

A heartbeat is sent to the Mirroring Controller arbitration process at the specified interval.

Specify a value between 1 and 2147483647.

The default is 16000 milliseconds.

This parameter does not need to be set for operation that does not use the arbitration server.

arbiter_alive_timeout

Timeout for monitoring connection to the Mirroring Controller arbitration process (seconds)

If the heartbeat does not respond within the specified number of seconds, the Mirroring Controller arbitration process is determined to have been disconnected, a message is output, and reconnection is attempted.

Specify a value between 1 and 2147483647.

The default is 20 seconds.

This parameter does not need to be set for operation that does not use the arbitration server.

arbiter_alive_retry

Number of retries for monitoring connection to the Mirroring Controller arbitration process (number of times)

Specify the number of heartbeat retries to be performed if an error is detected in the heartbeat to the Mirroring Controller arbitration process. If the heartbeat does not respond within the specified number of retries, the Mirroring Controller arbitration process is determined to have been disconnected.

Specify a value between 0 and 2147483647.

The default is 0 times.

This parameter does not need to be set for operation that does not use the arbitration server.

arbiter_connect_interval

Attempt interval for connection to the Mirroring Controller arbitration process (milliseconds)

Reconnection is attempted at the specified interval if connection fails at startup of the Mirroring Controller process or if the Mirroring Controller arbitration process is disconnected.

Specify a value between 1 and 2147483647.

The default is 16000 milliseconds.

This parameter does not need to be set for operation that does not use the arbitration server.

arbiter_connect_timeout

Timeout for connection to the Mirroring Controller arbitration process (seconds)

If reconnection at startup of the Mirroring Controller process or after disconnection of the Mirroring Controller arbitration process does not succeed within the specified number of seconds, connection to the Mirroring Controller arbitration process is determined to have failed and reconnection is attempted.

Specify a value between 1 and 2147483647.

The default is 20 seconds.

This parameter does not need to be set for operation that does not use the arbitration server.

fencing_command

'fencingCmdFilePath'

[Setting example]

fencing_command = '/mc/fencing_dir/execute_fencing.sh'

Specify the full path of the fencing command that fences a database server where an error is determined to have occurred.

Enclose the path in single quotation marks (').

Specify the path using less than 1024 bytes.

This parameter must be specified when "command" is set for heartbeat_error_action.

fencing_command_timeout

Fencing command timeout (seconds)

If the command does not respond within the specified number of seconds, fencing is determined to have failed and a signal (SIGTERM) is sent to the fencing command execution process.

Specify a value between 1 and 2147483647.

The default is 20 seconds.

arbitration_timeout

Arbitration processing timeout in the Mirroring Controller arbitration process (seconds)

The specified value must be at least equal to the value of fencing_command_timeout in the arbitration configuration file, which is the heartbeat monitoring time of the operating system or server.

If there is no response for at least the number of seconds specified, the primary server will not be switched and the standby server will not be disconnected. Therefore, perform degradation manually.

If the heartbeat_interval, heartbeat_timeout, and heartbeat_retry values are specified in arbitration.conf for the arbitration server, use the arbitration server values to design arbitration_timeout.

Specify a value between 1 and 2147483647.

The default is 30 seconds.

This parameter does not need to be set for operation that does not use the arbitration server.

arbitration_command

'arbitrationCmdFilePath'

[Setting example]

arbitration_command = '/mc/arbitration_dir/execute_arbitration_command.sh'

Specify the full path of the arbitration command to be executed when an abnormality is detected during heartbeat monitoring of the operating system or server. Enclose the path in single quotation marks (').

Specify the path using less than 1024 bytes.

This parameter must be specified when "command" is set for heartbeat_error_action.

arbitration_command_timeout

Arbitration command timeout (seconds)

If the arbitration command does not respond within the specified number of seconds, it is determined that execution of the arbitration command has failed and a signal (SIGTERM) is sent to the arbitration command execution process.

Specify a value between 1 and 2147483647.

The default is 30 seconds.

This parameter can be specified only when "command" is set for heartbeat_error_action.

shutdown_detached_synchronous_standby

on or off

Specify whether to forcibly stop the instance on the standby server when the standby server is disconnected.

on: Stop the instance.

off: Do not stop the instance.

If "on" is specified and the pre-detach command was created, the pre-detach command is executed and then the instance is stopped.

The default is "off".

post_switch_command

'postSwitchCmdFilePath'

[Setting example]

post_switch_command = '/mc/status_change/execute_post_switch.sh'

Specify the full path of the command to be called by Mirroring Controller after a new primary server is promoted during a failover of the primary server.

Enclose the path in single quotation marks (').

Specify the path using less than 1024 bytes.

post_attach_command

'postAttachCmdFilePath'

[Setting example]

post_attach_command = '/mc/status_change/execute_post_attach.sh'

Specify the full path of the command to be called by Mirroring Controller after the standby server is attached to the cluster system.

Enclose the path in single quotation marks (').

Specify the path using less than 1024 bytes.

pre_detach_command

'preDetachCmdFilePath'

[Setting example]

pre_detach_command = '/mc/status_change/execute_pre_detach.sh'

Specify the full path of the command to be called by Mirroring Controller before the standby server is disconnected from the cluster system.

Enclose the path in single quotation marks (').

Specify the path using less than 1024 bytes.

status_change_command_timeout

State transition command timeout (seconds)

Specify the timeout value of the post-switch command, post-attach command, and pre-detach command. If the command does not respond within the specified number of seconds, a signal (SIGTERM) is sent to the execution process of the status change command.

Specify a timeout between 1 and 2147483647.

The default is 20 seconds.

enable_promote_on_os_and_admin_network_error

on or off

If on is specified, if a admin network error occurs and replication is further lost, the system will ask the arbitration server to verify that the primary server and databases are running, and if they are down, promote the standby server.

The default is "off".

check_synchronous_standby_names_validation

on or off

Specify whether Mirroring Controller is to periodically check during operations whether the synchronous_standby_names parameter in postgresql.conf was changed by an incorrect user operation.

However, it is not recommended to enable this parameter, because performing this check causes Mirroring Controller to use the CPU of the database server redundantly and execute SQL statements at high frequency.

This parameter is compatible with operations in FUJITSU Enterprise Postgres 9.6 or earlier.

The default is "off".

db_instance_ext_pq_conninfo

'libpqConnectionSSLParmToConnectToDbinstance'

Specify, in key-value form, the connection parameter for libpq that Mirroring Controller adds when connecting to a database. The connection parameters you can specify are those related to SSL. Use ASCII characters to specify this parameter.

If you want to validate the server certificate using the destination host name, such as specifying sslmode=verify-full as the connection parameter, specify the host name in the Common Name of the server certificate in the sslservercertcn connection parameter. For information about the sslservercertcn connection parameter, refer to "Using the C Library (libpq)" in "Application Connection Switch Feature" in the Application Development Guide.

The connection parameter specified in this parameter must also be specified in the db_instance_ext_jdbc_conninfo.

db_instance_ext_jdbc_conninfo

'JDBCConnectionSSLParmToConnectToDbinstance'

Specify, in URI form, the connection parameter for JDBC that Mirroring Controller adds when connecting to a database. The connection parameters you can specify are those related to SSL. Use ASCII characters to specify this parameter.

If you want to validate the server certificate using the destination host name, such as specifying sslmode=verify-full as the connection parameter, specify the host name in the Common Name of the server certificate in the sslservercertcn connection parameter. For information about the sslservercertcn connection parameter, refer to "Using the JDBC Driver" in "Application Connection Switch Feature" in the Application Development Guide.

The connection parameter specified in this parameter must also be specified in the db_instance_ext_pq_conninfo.

arbiter_alive_interval

Y

N

N

N

arbiter_alive_timeout

Y

N

N

N

arbiter_alive_retry

Y

N

N

N

arbiter_connect_interval

Y

N

N

N

arbiter_connect_timeout

Y

N

N

N

arbitration_timeout

Y

N

N

N

arbitration_command

N

R

N

N

arbitration_command_timeout

N

Y

N

N

fencing_command

Y

R

Y

N

fencing_command_timeout

Y

Y

Y

N

shutdown_detached_synchronous_standby

Y

Y

N

N