All Apps and Add-ons

xenapp index

saabsystems
Explorer

Hi,

I am having trouble getting the data into Splunk for this app.

I have installed all of the TA's on to each of my XenApp 6.5 servers. (TA-XA65-Server, TA-XA65-Broker and TA-CitrixLicensing-1)

After checking the indexes, it looks like I am getting data for:
xenapp-alerts
xenapp-perfmon
xenapp-winevents

But I have 0 events for the xenapp index.

Are there any prerequisites for this to work? It's running on Server 2008R2 and I have confirmed that Powershell 1.0 is installed.

Cheers,
Jake.

0 Karma
1 Solution

bsonposh
Communicator

On your XenApp Servers have you set the execution policy for PowerShell? We use PowerShell to collect data and the default behavior is scripts are disabled.

Try running this command in an elevated PowerShell prompt:
Set-ExecutionPolicy RemoteSigned

View solution in original post

saabsystems
Explorer

Hi bsonposh,

Thanks, that worked perfectly - I don't use Powershell often so this hadn't occurred to me.

Thanks again!

Cheers,
Jake.

0 Karma

bsonposh
Communicator

On your XenApp Servers have you set the execution policy for PowerShell? We use PowerShell to collect data and the default behavior is scripts are disabled.

Try running this command in an elevated PowerShell prompt:
Set-ExecutionPolicy RemoteSigned

Get Updates on the Splunk Community!

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

If you’re unfamiliar, .conf is Splunk’s premier event where the Splunk community, customers, partners, and ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...