How to get Colored Timeline admin plugin working - GetEventLines / AlarmServiceToken failure on XProtect 2026 R1

[vinux84]

So I'm trying to get the Colored Timeline admin plugin working, but there is a disconnect of sorts. I did a bit of digging around the mip.log files and found this error. And its basically the same error that shows up in the UI -

Log error: 2026-08-17 10:55:40.533-07:00 [ 12] ERROR - MIP: ColoredTimeline - RuleUC () - RefreshEventsTable failed: An error occurred while receiving the HTTP response to http://vms25.wifieye.local:22331/Central/AlarmServiceToken. This could be due to the service endpoint binding not using the HTTP protocol. This could also be due to an HTTP request context being aborted by the server (possibly due to the service shutting down). See server logs for more details.

UI Error in Image.

This error was already there the first time the timeline UI was open before even creating a timeline rule. From the server itself I can successfully test the http connection

PS C:\Windows\system32> curl.exe -v --max-time 10 "http://vms25.wifieye.local:22331/Central/AlarmServiceToken"

• Host vms25.wifieye.local:22331 was resolved.
• IPv6: ::1
• IPv4: 172.16.0.247
• Trying [::1]:22331...
• Established connection to vms25.wifieye.local (::1 port 22331) from ::1 port 58619
• using HTTP/1.x

GET /Central/AlarmServiceToken HTTP/1.1
Host: vms25.wifieye.local:22331
User-Agent: curl/8.16.0
Accept: /

< HTTP/1.1 200 OK
< Content-Length: 3097
< Content-Type: text/html; charset=UTF-8
< Server: Microsoft-HTTPAPI/2.0
< Date: Mon, 17 Aug 2026 21:52:41 GMT

I couldn't find any other related logs to show here. It seems RefreshEventsTable() appears to fail when doing the Alarm/EventLog query -

`var serverId = EnvironmentManager.Instance.MasterSite.ServerId;
alarmClient = new AlarmClientManager().GetAlarmClient(serverId);

var rows = alarmClient.GetEventLines(0, int.MaxValue, filter);`

Has colored timeline been tested specifically with XProtect 2026 R1? Is there anything I'm missing? Look forward to hearing back

[Cacsjep]

@vinux84 when you open smart client on that machine, do you get alarms on standard "Alarm" Tab ?
This query is just an internal MIP SDK call, so not really on my side.

Test please:
curl.exe -v "http://vms25.wifieye.local:22331/Central/AlarmServiceToken?singleWsdl"

A lot of folks using it with 2026 R1 but, that does not mean something is not perfect.
Do you have federal architecture or and encrypted system ? Encryption looks off, based on logs.

[Cacsjep]

@vinux84 as far i know get event should be invoked when the selection changed, but I saw now it also show some when nothing is selected so you can try select one and then click the refresh button on top right, may it then filters and you get some without a code change, so you are right, a good fix would be only search eg call get event lines after a camera is selected, plus max rows 300

[Cacsjep]

@vinux84 looks anyway like a milestone bug, but when this max rows works, or just select one and filter. then we have a good bug report that on large events query the ES produce invalid error and shutdown the conn

[vinux84]

perfect, I'll update you on my findings

[vinux84]

That did it. I put an int in it directly -

var rows = alarmClient.GetEventLines(0, 500, filter) ?? Array.Empty();

[Cacsjep]

@vinux84 nice 👍 if you are able to create a PR I can merge it into master otherwise I can do that next week

[Cacsjep]

@vinux84 once again good job

[vinux84]

Thanks! appreciate it, glad we were able to get it to work

[Cacsjep]

@vinux84 fix is in release (3.4.32)