All Apps and Add-ons

Splunk and Citrix admin logs

kellywilson
Engager

Hello everyone! I am currently trying to figure out an effective way to capture "Administrative logs" in Citrix Xenapp 6.5 via SPLUNK. I was going to install the forwarder on the Secure Gateways but now I am not sure.

Basically, any changes to the farm along with the admins login and login failures including timestamps will need to be captured....somehow.

As stated earlier, we are running xenapp 6.5 and Splunk 6.0.3. If anyone has any ideas, thoughts, or have went down this road before, please let me know.

Thank you.

Tags (2)
0 Karma

jconger
Splunk Employee
Splunk Employee

There is a Splunk app for Citrix XenApp 6.5, but it may not meet your exact use case http://apps.splunk.com/app/1752/. It sounds like you are looking for the Configuration Logging feature build into XenApp for the farm changes.

0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

 (view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...