Commodore
Commodore
683 views

ArcSight Command Center direct link to event

Hello, everyone

Is it possible to create direct link for event or Case in Command Center Interface (ofcourse i mean 6.8 ver) as it realized in "9443" web (for example https://esmip:9443/arcsight/app?service=external/EventInspector&sp=S9K2sjkwBABDnTUTco4BDqw%3D%3D&sp=F&sp=F. for event  and https://emsip:9443/arcsight/app?service=external/CasesTop&sp=S(ResourceID)%3D%3D for cases)

Labels (1)
0 Likes
8 Replies
Absent Member.
Absent Member.

It probably won't work if you have to provide login information.

0 Likes
Commodore
Commodore

In 9443 you also get event page after success authentication. So it`s acceptable deviation from "direct conception" for me.

0 Likes
Fleet Admiral
Fleet Admiral

Hi RomaN,

What are u trying to achieve. Command Center is mostly for Administration. Why u need the alert/event information on that

0 Likes
Commodore
Commodore

Hi Balahasan,

The main goal is providing friendly interface to view correlated (base) events for web-users who receive incident notifications by e-mail. Since "8443" interface is more clear and useful for me, I would like to generate "8443 event link" for this notifications.

0 Likes
Absent Member.
Absent Member.

You should be able to can reference the event ID and use the API to put the event ID into a query. Since cases use eventId reference to know what events are attached this information will be available to you.

You can see it by using eventId = "<eventId goes here>" as your query.

0 Likes
Fleet Admiral
Fleet Admiral

Hello, who have solution?

0 Likes
Commodore
Commodore

Nope, Adam`s solution should works and protect contains some example, but it`s seems no way through "official" web interface

0 Likes
Absent Member.
Absent Member.

I'll be a bit more specific without doing the whole thing for you since this is months old...

Example URI you can give to ESM Command Center  (6.5c) - :

https://yourESM:8443/logger/search.ftl?ausm_query=eventId=123456789&from=$Now - 10m&$to=$Now

Don't get thrown off by the logger reference above. Build other bits into your URI what you need. You could pull the timestamps out from the event.

0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.