Latest Contributions by CraigRussell

So to confirm, in your OP you have outlined that your current ArcGIS Enterprise 10.8.1 environment is a single server with: ArcGIS Portal ArcGIS Server ArcGIS Data Store Does this server also have two IIS web adaptors on it - one called portal and another called server?  Did you use ArcGIS Enterprise Builder, or install each component manually? ... View more

I'm not aware of any specific examples of using IIS + URL Rewrite as a reverse proxy with ArcGIS Enterprise, so unfortunately I can't help you out there.  Also while I don't have personal experience with this type of configuration yet, the Azure Application Gateway documentation indicates that it can be used to access on-premises servers when they're connected by Azure ExpressRoute or VPN tunnels if traffic is allowed, so this could be an option - Application gateway components | Microsoft Docs Other than this, have you considered installing the portal and server web adaptors in the DMZ?  This would essentially act as a reverse proxy without having to worry about URL Rewrite or Application Request Routing. ... View more

Hi Steven Existing services automatically come across and portal items will be created for them.  Keep in mind that any existing users, roles, and permissions will no longer be valid, and your existing map services will use Portal security instead (e.g. share to everyone, organization, or groups). Craig ... View more

Hi Michael The APPLICATIONINTENT and MULTISUBNETFAILOVER conditions described in the support documentation refer to additional options which are available when using SQL AlwaysOn Availability Groups - you can choose not to use them in the connections, but as the article describes, this will essentially default to APPLICATIONINTENT=READWRITE and MULTISUBNETFAILOVER=NO. The key thing when changing from a standalone server to AAG is to connect to the AAG listener instead of the database server.  e.g. if the original server isGISSQL01, and we're adding GISSQL02, then there will be an AAG listener (kind of like a load balancer) in front of these servers with a DNS entry called something like GISSQL. If the connections still refer to GISSQL01 and this server becomes unavailable, then traffic will not automatically failover to GISSQL02.  This will only work as intended by connecting to the GISSQL listener. Cheers Craig ... View more

Hi Will internal traffic hit the ArcGIS Enterprise machine directly, or will this also go through the DMZ?  The reason that I ask is that Portal only supports one DNS, so you can't have internal traffic going to https://portal.domain.com/portal and external traffic going to https://external-portal.domain.com/portal.  The ArcGIS Server URL used for federation needs to be the same for internal and external traffic as well. ... View more

@BillFox has pretty much nailed it - if you have database owner privileges or you own the schema that you're working against, then there's nothing that I can think of to stop you from accidentally deleting tables. Ideally, you should have a login with elevated privileges that you only use for administrative purposes, and for everything else you use another login with the appropriate privileges (read or write) for whatever activity you're undertaking.  Unfortunately it isn't really possible to get this level of granularity if you're required by your organization to use Windows Authentication. ... View more

Another way that you could do this is to look at the manifest.xml file for each of the services in the ArcGIS Server configuration store directory, e.g. D:\arcgisserver\config-store\services.  This includes a list of all of the databases/datasets used in the service: CraigRussell_0-1615259292767.png You could just search across the services folder, or maybe do something to programmatically pull these details out if you're looking for a more elegant solution. ... View more

Hi Jordan I've done a few tests with Pro 2.7.1 and ArcGIS Enterprise 10.8.1, and while I've seen inconsistencies in the way that the addition of new fields manifests in Server/Portal, in general it has worked with just a service restart (i.e. not republishing the service). A few things to check: 1) Is the new field being flagged as visible in the Fields view from the map that you're publishing? CraigRussell_0-1615253842089.png If not, then it won't appear in the service definition. 2) Do you see the new field listed in the rest endpoint for the map/feature service? CraigRussell_1-1615253998926.png 3) Has the field been added but is just not visible by default in Portal (e.g. from the Data tab on the Portal item page)? CraigRussell_2-1615254195681.png Something that I've seen with a fair bit of consistency is new fields not being made visible by default. Cheers Craig ... View more

Hi Mary Its unlikely to have any effect because no domains listed = all domains allowed.  It isn't an issue to try out provided there aren't applications on other domains trying to connect to the ArcGIS REST API using CORS. Do you have the same issue if you bypass the web adaptor to access the services directory?  i.e. https://server.domain.com:6443/arcgis/rest/services ... View more

Are there any domains in Allow Origins under the portal security settings? CraigRussell_2-1613603045755.png I've seen some quirky behaviour like this with the REST service directory in situations where domains have been added to Allow Origins but the ArcGIS Server domain is missing.  By default all domains are allowed, but if you add any to this list then the ArcGIS Server domain must also be included. ... View more

I tested adding a new feature class to a registered geodatabase in ArcGIS Enterprise 10.8.1 which already had 50 feature classes and the sync only took around 30 seconds.  ArcGIS Server and the DB are on the same machine so there's zero latency, but that's still a significant difference in processing time. A couple of things to check... If any of the datasets that you're syncing participate in relationship classes, then the related data must also be synchronized as well, so the connecting user requires view privileges on both (I think I've seen this problem produce your error before). Also, check the documentation field size in the GDB_Items table in your database using this query: SELECT [ObjectID] ,[Name] ,DATALENGTH([Documentation])/1000 as DocumentSize_KB ,[Documentation] ,[ItemInfo] ,[Shape] ,[ContingentValues] FROM [DATABASE].[sde].[GDB_ITEMS] ORDER BY DATALENGTH([Documentation]) desc CraigRussell_1-1613537816321.png Whenever you run tools against feature classes or geodatabases, the execution of that tool creates a lineage record in the XML: CraigRussell_2-1613537881807.png This article describes how to delete the geoprocessing history from both the workspace and feature class XML - How To: Delete geoprocessing history from a geodatabase (esri.com) XML around 1Mb can cause a little bit of slowness, anything over 10Mb can cause serious problems.  I haven't encountered any scenarios where I've seen this directly affect the layer syncing process, but it is looking at the metadata (which comes from this documentation XML) so it could potentially be a factor. ... View more

It is worth noting that while I think being able to just add a single feature class has merit, the idea of the synchronization in this context is to add new layers, remove layers where access has been revoked, and (from 10.8.1 onwards) update schemas and item details. @jcarlson has touched on this, but if you're going to invest in bulk publishing layers from registered data stores (and I think most organizations should), then it is well worth looking at implementing database/permissions structures to complement the feature and its intended use. I guess something to ask is what is "a long time to sync"?  How many layers from your enterprise geodatabase are you trying to sync? ... View more

Hi Steven Are there any content switching rules on the F5 VIP?  It potentially looks like the context is changing when the request is made to the F5. Also, is the F5 using SSL passthrough?  SSL offloading isn't supported with ArcGIS Server. ... View more