What action is taken if a device with higher priority joins the FortiAnalyzer cluster while the primary is still active?

When a device with a higher priority joins the FortiAnalyzer cluster while the existing primary is still active, the new device will wait for the primary to fail or go down before it can take over the primary role. This behavior is essential for maintaining cluster stability and ensuring that there is a clear hierarchy within the cluster. FortiAnalyzer clusters are designed to prevent unnecessary disruptions or instant shifts in leadership, which could lead to data inconsistencies or loss.

In this scenario, the mechanism allows for a seamless transition of roles without disrupting ongoing processes or analysis tasks, thereby ensuring that the network management continues to function smoothly. After the primary device goes down, the higher-priority device will step in and assume the primary role, thus keeping the cluster operational with minimized downtime.