Splunk app for Citrix XA65 Not getting Farm Data

[snayak4]

Hi There,

I have installed splunk agent on my XA6.5 servers and one of the ZDC(broker). Copied the XA-server & XA-Broker addons in to the /etc/apps folder respectively. I am able to get some data but important data which i am looking for is XA farm details & User Experience which is missing. Set-ExecutionPolicy RemoteSigned has been set still no luck....

Environment details:- Splunk agent: 6.0.2.196940 Splunk server(indexer):6.0.2.196940 XA:6.5

Can anyone suggest me how i can make this work.

Thanks, Sandeep

[jconger]

FYI - there is a new app template for XenApp located here -> http://apps.splunk.com/app/1752/

To address the issues you see in the current app:

For the farm details, you may need to rebuild your zone to farm lookup table. To do this, navigate to Reports -> Maintenance -> Rebuild Zone Farm Lookup.

For the User Experience, you may be experiencing an issue where the Citrix servers have corrupt perfmon counters.

After applying certain XenApp hotfixes, the ICA Performance counters can be inadvertently removed. To resolve this, type the following command at a command prompt on your XenApp server:

regsvr32 c:\windows\system32\icaperf.dll

Reference: http://support.citrix.com/article/CTX127151

[jconger]

Make sure that the Splunk Windows Service is set to login as a XenApp farm administrator.

After you run the rebuild zone farm lookup, there is nothing for you to save. What this does is simply build a CSV file that associates server names to farm names so when you run a search on performance, you can group by farm name since perfmon has no concept of farm.

[snayak4]

I am neew to Splunk... could you tell me once i click on the rebuild zone farm lookup do i need to save that or run anything ?

[snayak4]

Hey,

I had tried with new app & rebuild the farm lookup but still not getting the Farm data.
But post executing the command i am able to get user experience data.

Am i missing something?