Having problems with your account or logging in?
A lot of changes are happening in the community right now. Some may affect you. READ MORE HERE
Highlighted
meirwah Absent Member.
Absent Member.
383 views

Error when using ArcSight Logger soap API

Tried to login using the soap API endopoint: https://arcsight-esm.localdomain:9000/soap/services/LoginService/LoginService

Getting response:

<soapenv:Envelope xmlns:soapenv="http://www.w3.org/2003/05/soap-envelope">

   <soapenv:Body>

      <soapenv:Fault>

         <soapenv:Code>

            <soapenv:Value>soapenv:Receiver</soapenv:Value>

         </soapenv:Code>

         <soapenv:Reason>

            <soapenv:Text xml:lang="en-US">Could not connect to report server.</soapenv:Text>

         </soapenv:Reason>

         <soapenv:Detail/>

      </soapenv:Fault>

   </soapenv:Body>

</soapenv:Envelope>

any idea what i'm missing?

Labels (2)
Tags (3)
0 Likes
6 Replies
meirwah Absent Member.
Absent Member.

Re: Error when using ArcSight Logger soap API

Error in logs (logger_webservices.log):

[2016-05-16 15:27:21,605][INFO ][WebServicesLoggerFramework][TP-Processor3] Working Directory: /opt/arcsight/logger/current/arcsight/logger

[2016-05-16 15:27:21,606][WARN ][TcpServerService][TcpServerService: 127.0.0.1:7780]

java.net.BindException: Address already in use

  at sun.nio.ch.Net.bind0(Native Method)

  at sun.nio.ch.Net.bind(Net.java:444)

  at sun.nio.ch.Net.bind(Net.java:436)

  at sun.nio.ch.ServerSocketChannelImpl.bind(ServerSocketChannelImpl.java:214)

  at sun.nio.ch.ServerSocketAdaptor.bind(ServerSocketAdaptor.java:74)

  at sun.nio.ch.ServerSocketAdaptor.bind(ServerSocketAdaptor.java:67)

  at com.arcsight.logger.distributed.TcpServerService.run(TcpServerService.java:33)

[2016-05-16 15:27:21,607][INFO ][WebServicesLoggerFramework][TP-Processor3] Max status records set to [1000]

[2016-05-16 15:27:22,549][ERROR][ReportServiceDelegate][TP-Processor3]

com.intellica.client.exception.ISecurityException: Could not connect to report server.

  at com.intellica.client.security.SecurityManager.addOrganization(Unknown Source)

  at com.arcsight.logger.auth.IntellicusACLSynchronizer.b(IntellicusACLSynchronizer.java:335)

  at com.arcsight.logger.auth.IntellicusACLSynchronizer.<init>(IntellicusACLSynchronizer.java:248)

  at com.arcsight.logger.auth.IntellicusACLSynchronizer.getInstance(IntellicusACLSynchronizer.java:420)

  at com.arcsight.logger.report.service.ReportServiceDelegate.initReportClient(ReportServiceDelegate.java:859)

  at com.arcsight.logger.webservices.login.LoginServiceSkeleton.getReportService(LoginServiceSkeleton.java:23)

  at com.arcsight.logger.webservices.login.LoginServiceSkeleton.getVersion(LoginServiceSkeleton.java:37)

  at com.arcsight.logger.webservices.login.LoginServiceMessageReceiverInOut.invokeBusinessLogic(LoginServiceMessageReceiverInOut.java:44)

  at org.apache.axis2.receivers.AbstractInOutSyncMessageReceiver.invokeBusinessLogic(AbstractInOutSyncMessageReceiver.java:42)

  at org.apache.axis2.receivers.AbstractMessageReceiver.receive(AbstractMessageReceiver.java:96)

  at org.apache.axis2.engine.AxisEngine.receive(AxisEngine.java:145)

  at org.apache.axis2.transport.http.HTTPTransportUtils.processHTTPPostRequest(HTTPTransportUtils.java:275)

  at org.apache.axis2.transport.http.AxisServlet.doPost(AxisServlet.java:120)

  at javax.servlet.http.HttpServlet.service(HttpServlet.java:637)

  at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)

  at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)

  at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)

  at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)

  at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)

  at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)

  at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)

  at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)

  at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:298)

  at org.apache.jk.server.JkCoyoteHandler.invoke(JkCoyoteHandler.java:190)

  at org.apache.jk.common.HandlerRequest.invoke(HandlerRequest.java:291)

  at org.apache.jk.common.ChannelSocket.invoke(ChannelSocket.java:776)

  at org.apache.jk.common.ChannelSocket.processConnection(ChannelSocket.java:705)

  at org.apache.jk.common.ChannelSocket$SocketConnection.runIt(ChannelSocket.java:898)

  at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:690)

  at java.lang.Thread.run(Thread.java:745)

0 Likes
Micro Focus Expert
Micro Focus Expert

Re: Error when using ArcSight Logger soap API

What Logger is this:

- is this a free trial Logger?

Can you login to that Logger using the GUI and the same credentials?

0 Likes
meirwah Absent Member.
Absent Member.

Re: Error when using ArcSight Logger soap API

I can login to ESM with it... isn't it the same cred for logger to?

I have a license which I added to this ESM.
Which line in the license indicates if logger has soap API enabled or not?

0 Likes
meirwah Absent Member.
Absent Member.

Re: Error when using ArcSight Logger soap API

I’m using the ArcSight AWS image from the marketplace :

https://aws.amazon.com/marketplace/pp/B010R07Q7C

0 Likes
Micro Focus Expert
Micro Focus Expert

Re: Error when using ArcSight Logger soap API

This is not HPE ArcSight Logger.

This is HPE ArcSight Enterprise Security Manager (ESM).

Although the two products use a similar storage engine, you cannot make Logger API Calls to ESM.

The free trial version of HPE ArcSight Logger does not include API or Reporting.

Other HPE ArcSight Loggers do include the Logger API and Logger Reporting.

0 Likes
meirwah Absent Member.
Absent Member.

Re: Error when using ArcSight Logger soap API

So ESM does not expose the logger API ? in any way?
how come it exposes port 9000 where I can see the logger API WSDL if so?

0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.