Location of some useful logs (auth and stuff)¶

/opt/arcsight/manager/logs/default/server.log

Banned password characters¶

I guess this character was a problem at some point: ^

Example logout¶

curl -D- -k -H "Content-Type: application/x-www-form-urlencoded" -XPOST  'https://ESM_HOST:8443/www/core-service/rest/LoginService/logout?authToken=HBfedZ5AefEosvFXSbgIfy5wzj9v426giAp7OihCabg.'

View all entries in an active list¶

URL: https://<ESM manager host>:8443/www/manager-service/rest/ActiveListService/getEntries?authToken=xxxxxxxxxxxxxxx.&resourceId=xxxxxxxxxxxxxxxxxxx

Some stuff¶

https://community.softwaregrp.com/t5/Archive-Discussion-Board/Full-REST-API-Documentation-For-ESM/td-p/1538807