Splunk and Citrix admin logs

[kellywilson]

Hello everyone! I am currently trying to figure out an effective way to capture "Administrative logs" in Citrix Xenapp 6.5 via SPLUNK. I was going to install the forwarder on the Secure Gateways but now I am not sure.

Basically, any changes to the farm along with the admins login and login failures including timestamps will need to be captured....somehow.

As stated earlier, we are running xenapp 6.5 and Splunk 6.0.3. If anyone has any ideas, thoughts, or have went down this road before, please let me know.

Thank you.

[jconger]

There is a Splunk app for Citrix XenApp 6.5, but it may not meet your exact use case http://apps.splunk.com/app/1752/. It sounds like you are looking for the Configuration Logging feature build into XenApp for the farm changes.