Re: Fetching events using ArcSight API
If you look at those services' XML namespace declarations for the REST client, they seem to be pointing to XML namespace definitions located somewhere under the arcsight.com domain. We have checked several of these locations with browsers and various command line web clients, and invariably we either get redirected to HP's SIEM web page (just try going to http://www.arcsight.com), or HTTP 503 errors (if you try to get to a specific XML namespace definition document for a Service).
We had the same question some months ago about the SOAP client's use of an XML schema definition (XSD). Similarly that XSD was hosted someplace out at arcsight.com:
my $soap = SOAP::Lite
-> proxy("$wsdl", cookie_jar => HTTP::Cookies->new(ignore_discard=> 1))
Daniel Bravo was working that HPE support case, 5309573593, for SOAP API. No one seems to know what happened to all these XML namespace definitions (for REST) and the XSD (for SOAP). Has HP come up with some other way for the client to know about the Logger's XML namespace?