All Apps and Add-ons

Citrix XenApp - TA-XA60-Broker Powershell scripts error

BP9906
Builder

I installed the TA to my XenApp server via deployment server and it errors everytime. PS scripts are set to remotesigned. I can run the ps script and I get data in Splunk format.

Splunk Forwarder 4.3.5 x64 running as local system on 2008 R2.

Get-XAFarm : Error reading the current administrator data (0x80130008)

Any ideas?


07-24-2013 12:17:52.547 -0700 ERROR ExecProcessor - message from "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -command " &'C:\Program Files\SplunkUniversalForwarder\etc\apps\TA-XA60-Server\bin\powershell\GetXASessionProcess60.ps1'" -index xenapp" Get-XAFarm : Error reading the current administrator data (0x80130008)
07-24-2013 12:17:52.547 -0700 ERROR ExecProcessor - message from "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -command " &'C:\Program Files\SplunkUniversalForwarder\etc\apps\TA-XA60-Server\bin\powershell\GetXASessionProcess60.ps1'" -index xenapp" At C:\Program Files\SplunkUniversalForwarder\etc\apps\TA-XA60-Server\bin\powers
07-24-2013 12:17:52.547 -0700 ERROR ExecProcessor - message from "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -command " &'C:\Program Files\SplunkUniversalForwarder\etc\apps\TA-XA60-Server\bin\powershell\GetXASessionProcess60.ps1'" -index xenapp" hell\GetXASessionProcess60.ps1:8 char:23
07-24-2013 12:17:52.547 -0700 ERROR ExecProcessor - message from "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -command " &'C:\Program Files\SplunkUniversalForwarder\etc\apps\TA-XA60-Server\bin\powershell\GetXASessionProcess60.ps1'" -index xenapp" + $FarmName = Get-XAFarm <<<< | select -ExpandProperty FarmName
07-24-2013 12:17:52.547 -0700 ERROR ExecProcessor - message from "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -command " &'C:\Program Files\SplunkUniversalForwarder\etc\apps\TA-XA60-Server\bin\powershell\GetXASessionProcess60.ps1'" -index xenapp" + CategoryInfo : InvalidResult: (:) [Get-XAFarm], CitrixException
07-24-2013 12:17:52.547 -0700 ERROR ExecProcessor - message from "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -command " &'C:\Program Files\SplunkUniversalForwarder\etc\apps\TA-XA60-Server\bin\powershell\GetXASessionProcess60.ps1'" -index xenapp" + FullyQualifiedErrorId : GetCitrixAdminType,Citrix.XenApp.Commands.GetFar
07-24-2013 12:17:52.547 -0700 ERROR ExecProcessor - message from "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -command " &'C:\Program Files\SplunkUniversalForwarder\etc\apps\TA-XA60-Server\bin\powershell\GetXASessionProcess60.ps1'" -index xenapp" mCmdlet
07-24-2013 12:17:52.547 -0700 ERROR ExecProcessor - message from "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -command " &'C:\Program Files\SplunkUniversalForwarder\etc\apps\TA-XA60-Server\bin\powershell\GetXASessionProcess60.ps1'" -index xenapp"

07-24-2013 12:17:53.072 -0700 INFO ExecProcessor - Ran script: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -command " &'C:\Program Files\SplunkUniversalForwarder\etc\apps\TA-XA60-Server\bin\powershell\GetXASessionProcess60.ps1'" -index xenapp, took 1532.2 milliseconds to run, 22228 bytes read

0 Karma
1 Solution

BP9906
Builder

I resolved the problem by configuring the Splunk Forwarder App to run as a domain user account and giving that user local admin permissions in windows and citrix readonly permissions via citrix console.

View solution in original post

0 Karma

BP9906
Builder

I resolved the problem by configuring the Splunk Forwarder App to run as a domain user account and giving that user local admin permissions in windows and citrix readonly permissions via citrix console.

0 Karma

BP9906
Builder

Tried installing Citrix SDK and still didnt help.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas     Cisco Live 2026 is almost here, and this ...

What Is the Name of the USB Key Inserted by Bob Smith? (BOTS Hint, Not the Answer)

Hello Splunkers,   So you searched, “what is the name of the usb key inserted by bob smith?”  Not gonna lie… ...

Automating Threat Operations and Threat Hunting with Recorded Future

    Automating Threat Operations and Threat Hunting with Recorded Future June 29, 2026 | Register   Is your ...