|
POST
|
We have a fully patched 10.9 Enterprise system (Portal, DataStore, Server, GeoEvent), but security scans (Nessus Scanners from Tenable) results in some high log4j and Tomcat vulnerabilities. Security team is saying we need to remediate or upgrade. I believe the machines originally had 10.7 or 10.8 and have been upgraded a couple times. Curious if folks have had experience with this. My only thought is that upgrades and patches do not delete old jar files, and the security scans are just looking at version numbers. I know that old directories sometimes do not get deleted from doing some upgrades myself, but have never heard of a false positive for security vulnerabilities as an unintended result.
... View more
09-14-2022
06:39 AM
|
1
|
2
|
2474
|
|
POST
|
We are looking into ArcGIS Monitor to fulfill some security requirements to generate access / audit logs for all users on the system. In short, which users are accessing which specific services, and when (for all users and all services). Is this something supported by Monitor, and if not, does anyone know if such a product / tool exists?
... View more
08-30-2022
09:02 AM
|
3
|
1
|
1044
|
|
POST
|
Thank you Vince - I am onboard 100%. I always took for granted that native geometry types are required. My challenge is convincing other people (namely DBAs who have little to no spatial experience) of the same. They store polygons as geojson representations in a string field. It makes zero sense. And the geojson doesn't even conform to spec. I'm just trying to make a case for point data with a lat / long column, since like I mentioned I can create a query layer or database view, publish a feature service on top of it and get access to the same geospatial queries. Unfortunately I was raised on esri geodatabases, so dealing with spatial indices, query performance, and the like outside of that environment is somewhat opaque to me. I'll try PGAdmin directly against my three tables and see if query performance is different. Thanks!
... View more
08-16-2022
12:57 PM
|
0
|
0
|
9400
|
|
POST
|
@VinceAngelo Looping back around to this, I've been trying to performance test queries on ArcGIS services built on different types of "layers" to demonstrate we should be storing spatial data with native spatial types. In all cases, I have 500k records with the same points, lat / longs generated randomly roughly over the contiguous US. 1. Native geometry in esri enterprise geodatabase (on top of postGIS) point feature class 2. Query layer on lat / long column from non-spatial table with lat / long columns (table also exists in enterprise geodatabase though because that's all I have access to currently) 3. Database view on same table as 2. above In the case of the database view and query layer, they were created using SELECT *, ST_SetSrid(ST_MakePoint(longitude, latitude),4326) FROM randomtable. I have three MapServices published on each of those layers, and have been performing 10 spatial queries with different geometries on each, and taking the average response time of the API for each service. At 500k records, the differences are in the 100ths or 1000ths of a second, IMO too small. Are the real differences as you indicated going to appear with way more records than 500k, or am I going about this incorrectly? Thank you!
... View more
08-15-2022
06:47 AM
|
0
|
2
|
9422
|
|
POST
|
I have read only access to a database (registered to ArcGIS Enterprise) table with a latitude and longitude column. I would like to publish a Feature Service from this table without creating an additional column or creating a different table. I thought this would be possible using views, but cannot figure it out - I remember it being more straightforward in ArcMap. My table is in Postgresql, but I'm limited to using ArcGIS Pro for creating the view. Any suggestions would be helpful.
... View more
08-10-2022
11:33 AM
|
0
|
0
|
700
|
|
POST
|
And tracking at the web server (web adaptor, load balancer, etc) level could work, but would require custom development. Also a single map might make dozens if not hundreds of queries to the same service as the user pans and zooms - I'm hoping for a solution that does not require sorting though all that to generate single session logs.
... View more
08-10-2022
09:39 AM
|
0
|
0
|
3750
|
|
POST
|
Thanks all - good info here. Ours is more a "security compliance and auditing requirement." We have a number of restricted datasets, and need to pull logs on who is accessing them to ensure that only those that should are. This falls more into the "does ArcGIS Enterprise security work the way they say" category unfortunately, which I have no reason to doubt, but the powers that be need to cross check logs anyway for auditing purposes.
... View more
08-10-2022
09:37 AM
|
1
|
0
|
3752
|
|
POST
|
I’m aware of ArcGIS Monitor and it’s full capabilities, but our requirement is much simpler: be able to generate an access list of which users are accessing which REST endpoints for all system usage (all users and all endpoints, with the possible exclusion of hosted layers). Does anyone know of any way to do this without using ArcGIS Monitor? And preferably not requiring a prohibitive amount of custom development, though some is acceptable.
... View more
08-09-2022
01:45 PM
|
2
|
6
|
3827
|
|
POST
|
Curious if its possible (out of the box without development) for ArcGIS Enterprise to support custom ODBC or JDBC drivers to other database platforms. I know it only supports a handful for spatial based data, but we have Presto DB in our environment with lots of useful data, and would rather not worry about ETLs just for getting them into arcgis for read-only services. Any thoughts here?
... View more
08-08-2022
06:04 AM
|
0
|
2
|
1686
|
|
POST
|
I'm looking into the automation of publishing MapImageLayers using ArcPy. It seems pretty straightforward, except when you want to do any customization, such as enabling Feature Access, WMS or WFS, setting group sharing, pooling, etc. etc. I've seen examples how you can parse the sddraft using minidom and enable this, most of which seem complicated and verbose. Are there options to do this more easily after publishing? It's very easy to adjust options (enable WMS / WFS, and Feature Access, set pooling, edit number of records returned, etc) via Server manager. Is there a way to do this programmatically via the admin API post-publish instead of editing the sddraft xml directly pre-publish For Portal options (in a federated server instance), I suppose I could grab the itemID from the REST endpoint (which I should be able to construct from my sddraft options), and use the Python API to set group sharing and other options there. Just curious what patterns folks have followed.
... View more
08-05-2022
01:01 PM
|
0
|
0
|
863
|
|
POST
|
We have Enterprise 10.9 and have the exact same issue in trying to embed our own dashboards (same origin, but still getting CORS errors). Curious if you've upgraded to 10.9.1 and it's been fixed or not? I know there is a workaround / hack listed below, but generally only do that as a last resort.
... View more
08-04-2022
06:14 AM
|
0
|
1
|
7439
|
|
POST
|
@baohuachu2 Yeah, I'm unsure if Esri will change their API to support native Proxy objects like Vue uses. Some of the additional code examples at the bottom of this thread show some good patterns for working with Vue 3.x and AGIS JS API. In short, don't set your esri objects (map view, map, etc) to be vue reactive in your individual components, but instead use the AGIS JS API to handle the reactivity of Esri objects. You can create non reactive objects and return them in the setup function to use through the rest of your component. I don't think this kind of option existed for Vue2. If you are using Vuex, I believe I ended up using toRaw and markRaw (https://vuejs.org/api/reactivity-advanced.html#toraw) to handle reactivity of Esri objects in Vuex. Hope this helps. At this point it's been a while so I forget the exact details. 🙂
... View more
08-01-2022
07:25 AM
|
0
|
0
|
7802
|
|
POST
|
I understand how I can configure an AGOL setting for "allow portal access" such that if a user on my 10.9 Enterprise Portal tries to add a secured service from my AGOL to a web map, the user can authenticate to AGOL using SAML Enterprise Login. However is it possible to somehow configure the reverse (which actually seems like a more compelling use case). If I publish sensitive data to my Enterprise Portal, and an AGOL user wants to add it to an AGOL webmap, I would hope that they could use their Portal Enterprise login (SAML) to authenticate the item. As of now it just prompts for a username and password, no SAML auth prompt at all. Any thought here?
... View more
07-22-2022
06:52 AM
|
0
|
2
|
1350
|
|
POST
|
Thank you! I knew it was somewhere in there! dir(item) just returns too many properties 🙂
... View more
07-01-2022
06:11 AM
|
0
|
0
|
2386
|
|
POST
|
I can easily get a list of all feature services in my AGOL environment fs = gis.content.search(query="type:service", max_items=10000) From these results, I am curious if there is any easy way to understand if a feature service is "hosted" or not. In other words, how can I tell if a feature service was created by a user uploading or creating data (csv, shapefile, etc.) or if a user added a feature service from an existing arcgis url (new item-->from url-->paste in REST endpoint-->etc). I know I can find this information out by looking at the items in our AGOL instance, but want to be able to do this programmatically. Any tips?
... View more
06-30-2022
09:25 AM
|
1
|
2
|
2432
|
| Title | Kudos | Posted |
|---|---|---|
| 2 | 02-23-2026 11:00 AM | |
| 1 | 07-08-2025 11:33 AM | |
| 1 | 11-07-2023 08:32 AM | |
| 2 | 10-01-2025 06:52 AM | |
| 5 | 09-08-2025 07:31 AM |
| Online Status |
Offline
|
| Date Last Visited |
Thursday
|