HowTo:  Administratively Reset GeoEvent Server (10.5.x / 10.6.x)

07-25-2018 03:24 PM
Esri Regular Contributor
13 11 12.3K

GeoEvent Server Automatic Configuration Backup Files

It is possible, and in fact preferred, to create XML snapshots of your ArcGIS GeoEvent Server configuration using GeoEvent Manager (Site > GeoEvent > Configuration Store > Export Configuration).

But what if something has gone sideways and you cannot access GeoEvent Manager? Before you delete GeoEvent Server’s ZooKeeper distributed configuration store, you will want to locate a recent XML configuration and see if recent changes to inputs, outputs, GeoEvent Definitions, and GeoEvent Services are in the configuration file.

Beginning with GeoEvent Server 10.5, a copy of the configuration is exported automatically for you, daily, at 00:00:00 hours (local time).

  • Automatic backup files, by default, are written to the following folder:
  • You can change the folder used by editing the folder registered for 'Automatic Backups':
    Site > GeoEvent > Data Stores > Register Folder
  • You can change when and how often snapshots of your configuration are taken:
    Site > Settings > Configure Global Settings > Automatic Backup Settings


GeoEvent Server ZooKeeper Files

At the 10.5 / 10.5.1 release – GeoEvent Server uses the “synchronization service” platform service in ArcGIS Server, which is running an Apache ZooKeeper behind the scenes. Since this is an ArcGIS Server service, the application files are found in the ArcGIS Server 'local' folder (e.g. C:\arcgisserver\local).

If a system administrator wanted to administratively clear a configuration of GeoEvent Server they could stop the ArcGIS Server platform service -- using the Administrative API -- or stop the ArcGIS Server Windows service and delete the files and folders found beneath C:\arcgisserver\local\zookeeper\.

  • You should leave the parent folder, C:\arcgisserver\local\zookeeper intact.
  • You should also confirm with Esri Technical Support that patches, service packs, or hot-fixes you may have installed have not changed how the “synchronization service” platform service is used by other ArcGIS Enterprise components before administratively deleting files from beneath the ArcGIS Server directories. (ArcGIS GeoAnalytics Server, for example, uses the platform service to elect a machine participating in a multiple-machine analytic as the "leader" for an operation.)

Beginning with the 10.6 release – GeoEvent Server is running its own Apache ZooKeeper instance within the ArcGIS GeoEvent Gateway Windows service. If a system administrator wanted to administratively clear a 10.6 configuration of GeoEvent Server they could stop the ArcGIS GeoEvent Gateway Windows service – which will also stops the dependent ArcGIS GeoEvent Server Windows service – and then delete the files and folders found beneath: C:\ProgramData\Esri\GeoEvent-Gateway\zookeeper-data.

GeoEvent Server Kafka File

NOTE: The following only applies to 10.6 and later releases of GeoEvent Server.

Beginning with the 10.6 release – GeoEvent Server is running an Apache Kafka instance as an event message broker within the ArcGIS GeoEvent Gateway Windows service. The message broker uses on-disk topic queues to manage event records. The event records which have been sent from the message broker to a GeoEvent Server instance for processing are recorded within the broker's associated configuration store (e.g. Apache ZooKeeper).

The Kafka message broker provides a transactional message guarantee that the RabbitMQ message broker (used in 10.5.1 and earlier releases) does not provide. If the GeoEvent Gateway on a machine were stopped and restarted, the configuration store will have recorded where event message processing was suspended and will use indexes into the topic queues to resume processing previously received event records.

The topic queue files are closed, new files created, and old files deleted according to configurable data retention strategy. However, if the GeoEvent Gateway were stopped and its ZooKeeper configuration were deleted, the Kafka topic queues will likely be orphaned and potentially large message log files may not be deleted from disk according to the data retention strategy. In this case, a system administrator might need to locate and delete the topic queue files from beneath C:\ProgramData\Esri\GeoEvent-Gateway\kafka.


GeoEvent Server Runtime Files

When GeoEvent Server is initially launched, following a new product installation, a number of files are created as the system framework is built. These files, referred to as “cached bundles” are written into a \data folder in the GeoEvent Server installation directory (e.g  C:\Program Files\ArcGIS\Server\GeoEvent\data). Again, if something has gone sideways, a system administrator might want to try deleting these files, forcing the system framework to be rebuilt, before deciding to uninstall and then reinstall GeoEvent Server.

This might be necessary if, for example, you continue to see the message "No Services Found" displayed in a browser window (after several minutes and a browser refresh) when attempting to launch GeoEvent Manager. In this case, deleting the runtime files from the \data folder to force the system framework to be rebuilt may remedy an issue which prevented GeoEvent Server from launching correctly the first time.

Another reason a system administrator may need to force the system framework to be rebuilt might be observing a message that the ArcGIS GeoEvent Server Windows service could not be stopped “in a timely fashion” (when selecting to stop the service using the Windows Task Manager). In this case, an administrator should ensure the process identified in the C:\Program Files\ArcGIS\Server\GeoEvent\instances\ file has been stopped. Administratively terminating this processes to stop GeoEvent Server can leave the system framework in a bad state, requiring the \data files be deleted so the framework can be rebuilt.

Administratively Reset GeoEvent Server

Deleting the Apache ZooKeeper files (to administratively clear the GeoEvent Server configuration), the product’s runtime files (to force the system framework to be rebuilt), and removing previously received event messages (by deleting Kafka topic queues from disk) is how system administrators reset a GeoEvent Server instance to look like the product has just been installed. Below are the steps and system folders you need to access to administratively reset GeoEvent Server at the 10.5.x and 10.6.x releases.

If you have custom components in the C:\Program Files\ArcGIS\Server\GeoEvent\deploy folder, move these from the \deploy folder to a local temporary folder, while GeoEvent Server is running, to prevent the component from being restored (from the distributed configuration store) when GeoEvent Server is restarted. Also, make sure you have a copy of the most recent XML export of your GeoEvent Server configuration if you want to save the elements you have created.


  You should confirm with Esri Technical Support that system folders and files you plan to delete before executing the steps below. Files you delete following the steps below are irrecoverable.

  1. Stop the ArcGIS Server Windows service.
    (This will also stop the GeoEvent Server Windows service)
  2. Locate and delete the files and folders beneath C:\Program Files\ArcGIS\Server\GeoEvent\data
    (Leave the \data folder intact)
  3. Locate and delete the files and folders beneath C:\arcgisserver\local\zookeeper
    (Leave the \zookeeper folder intact)
  4. Locate and delete the files and folders beneath C:\ProgramData\Esri\GeoEvent
    (Leave the \GeoEvent folder intact)
  5. Start the ArcGIS Server Windows service.
    (Confirm you can log in to the ArcGIS Server Manager web application)
  6. Start the ArcGIS GeoEvent Server Windows service.


  Note that the lifecycle of the ArcGIS GeoEvent Gateway service is intended to mirror that of the operating system.
  You can administratively reset GeoEvent Server (e.g. deleting its runtime files from its \data folder) without stopping the ArcGIS GeoEvent Gateway service -- unless you also want to administratively delete the ZooKeeper files from the configuration store (which in the 10.6.x are maintained as part of the ArcGIS GeoEvent Gateway service).

  1. Stop the ArcGIS GeoEvent Server Windows service.
  2. Locate and delete the files and folders beneath the following directories (leaving the parent folders intact):
    C:\Program Files\ArcGIS\Server\GeoEvent\data\
  3. Stop the ArcGIS GeoEvent Gateway Windows service.
    This will also stop the ArcGIS GeoEvent Server Windows service if it is running.
  4. Locate and delete the files and folders beneath the following directories.
    Leave the parent folders (highlighted) intact:
    C:\Program Files\ArcGIS\Server\GeoEvent\gateway\log
  5. If you delete the zookeeper-data files, you should remove any orphaned topic queues
    by deleting the on-disk Kafka logs (delete the 'logs' sub-folder, leave the 'kafka' folder intact):
  6. Locate and delete the GeoEvent Gateway configuration file (a new file will be rebuilt).
    C:\Program Files\ArcGIS\Server\GeoEvent\etc\com.esri.ges.gateway.cfg
  7. Start the ArcGIS GeoEvent Server Windows service.
    This will start the ArcGIS GeoEvent Gateway service if it has been stopped.
    Confirm you can log in to GeoEvent Manager.

At this point you can also review the contents of the rebuilt com.esri.ges.gateway.cfg file. The GeoEvent Gateway will record its message broker and configuration store port configurations in this file if it was able to launch successfully:





Occasional Contributor

Was applying a patch to our Geovent 10.5 and got the "No service found" error. Lucky I didn't this just a couple of weeks after this post, which saved my day...

New Contributor II

I have received this error...

"ArcGIS GeoEvent Server  
Current Version:  10.6.1
ArcGIS GeoEvent Server is waiting for a connection to the Zookeeper. If this takes too long, contact System Administrator to make sure Gateway is properly running."

Also, the com.esri.ges.gateway.cfg did not recreate, even though the service restarted with no apparent problems.

New Contributor II

I am dealing with this error now.   However, I have a Linux installation.  Would it be possible to update the blog to include the paths to the files for Linux installations, please? 

Before I continue trying to fix the problem, I am trying to find the "copy of the configuration that is exported automatically for you, daily, at 00:00:00 hours (local time)." 

New Contributor II

We ended up recreating these files ourselves and restarting the service, and eventually, after running through this process a couple of times, our GeoEvent Manager seems to be stable. Although, we are still getting connection errors and info logs (every second), they don't seem to be affecting performance.

New Contributor II

I am trying to update the time that the daily backups happen as IT often run processes that restart the servers at 00:00:00. I am trying to set it to 02:00:00, however I am unable to update it by typing it in, and when I select it from the drop down list, it populates it as 07:00:00. If I do manage to make it 07:00:00 then when I click Save, the Properties shows it again as 07:00:00. Has anyone else had this trouble?

Esri Contributor

Hi Dana,

I had setup a RHEL 7.5 environment and installed ArcGIS Server 10.6.1 with GeoEvent (UnFederated). Performed a Administrative Reset of GeoEvent Server by following the below steps:

- Stopped the GeoEvent Server and Gateway daemons (details can be found here : )

- Deleted the required files from the following folders:
NOTE: The .esri folder specified below is hidden. I used WinSCP to navigate to these folders.


/home/linux/.esri/GeoEvent-Gateway/<>/kafka - delete the 'logs' folder, leave the 'kafka' folder intact

- Started the GeoEvent Gateway daemon
- Waited for a minute and then started the GeoEvent Server daemon
- Waited for a minute, cleared the browser cache
- GeoEvent Manager launched successfully

Hope this helps!



RJ Sunderman

Esri Contributor

Hi Gill,

Which version of GeoEvent are you working with?

I tested it on 10.6.1 and seems like its a bug where the time which gets set is 3 hours minus the time I set. Example: If I set it to 10:00:00 and save it, it gets set to 7:00

Issue seems to be resolved in 10.7.



New Contributor II

Hi Richardson,

We are using 10.6.1. I think I managed to make it some time in the early morning, so happy with it for now. We will wait for 10.7 and all the other benefits. 

Thank you,


New Contributor II

I recently noticed the Automatic Backups stopped running on our GeoEvent. Of course I was in need of a back up and hence how I found it had stopped. Fortunate I had an exported configuration that had what I needed. 

Ok so the question, why did it stop?

I have checked the Site>Configure Global Settings>Automatic Backup settings

Daily 00:00



So by these setting it should be running.

ArcGIS Enterprise

10.6.1 with all recommended updates installed.

Has anybody encountered this issue?

RJ Sunderman

New Contributor III

We were in the unforunate situation of having to run an admin reset twice now during the last two months and are very thankful for the detailed step by step description.

But we ran into a very special behavior: we take a back up of the config file, the admin reset delets all the config files in the folder, we import config file again in GE Manager and it somehow adds what we had set up before PLUS old services 😐 So even though we deleted some services many months ago, they are all over a sudden showing up in our list.

We were busy comparing the different config files and those services are there in the file, after an admin reset. The backup file does not contain those services.

After the first admin reset two months ago, we went ahead and deleted the redundant services again via Manager. And then it happened again during the second admin reset some weeks later.

Since we observered this behavior not only once but now twice, we are wondering, where the admin reset process is fetching this information from? We are simply dumbfounded and surprised too 🙂 Maybe someone has an explanation for us?


Many thanks in advance,


Esri Contributor

Hello @BarbaraS,

My name is Dan and I work in Esri Technical Support. I would like to work with you through a support case on this behavior you describe here.

I will direct message you to get additional information for creating the case.

Kind regards,