All Apps and Add-ons

ICA Session : no perfmon

sylvainLuce
Explorer

Hi,
I installed the TA-X86x-Server on my citrix Farm

I see all dashboard. No problem to collect data execpt ONE : the ICA Session

[perfmon://ICASession]
interval = 60
object = ICA Session
counters = *
instances = *
index = xd_perfmon
disabled = 0
mode = multikv

My Windows Server is installed in French, so I don't know if this is a problem.
I have nothing in log 😞

Any ideas about it ? or ideas where to look at ?

Thanks,
Sylvain

0 Karma

jconger
Splunk Employee
Splunk Employee

After applying certain XenApp hotfixes, the ICA Performance counters can be inadvertently removed. To resolve this, type the following command at a command prompt:

regsvr32 c:\windows\system32\icaperf.dll

Reference: http://support.citrix.com/article/CTX127151

slgizmo
Explorer

The registration of the DLL worked for us.

0 Karma

sylvainLuce
Explorer

Thx for your answer. I found this morning :

object = Session ICA

WORK ! Why ?! Don't know. All object are good in English except this one, which only work in French 😕
All counters are in French too. No way to have them in French. Citrix is installed in French. Perhaps that's the problem 🙂

0 Karma

sylvainLuce
Explorer

I found more information in _internal

ERROR ExecProcessor - message from ""C:\Program Files\SplunkUniversalForwarder\bin\splunk-perfmon.exe"" splunk-perfmon - PdhEnumObjectItems returned error 0xc0000bb8 for object 'ICA Session'.

But what does it mean ? 🙂

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

SOC4Kafka - New Kafka Connector Powered by OpenTelemetry

The new SOC4Kafka connector, built on OpenTelemetry, enables the collection of Kafka messages and forwards ...

Event Series: Level up your SOC: Advancing with Splunk Enterprise Security

AI has fundamentally raised the stakes for security operations, and this three-part series is your guide to ...

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...