All Apps and Add-ons

xenapp index

saabsystems
Explorer

Hi,

I am having trouble getting the data into Splunk for this app.

I have installed all of the TA's on to each of my XenApp 6.5 servers. (TA-XA65-Server, TA-XA65-Broker and TA-CitrixLicensing-1)

After checking the indexes, it looks like I am getting data for:
xenapp-alerts
xenapp-perfmon
xenapp-winevents

But I have 0 events for the xenapp index.

Are there any prerequisites for this to work? It's running on Server 2008R2 and I have confirmed that Powershell 1.0 is installed.

Cheers,
Jake.

0 Karma
1 Solution

bsonposh
Communicator

On your XenApp Servers have you set the execution policy for PowerShell? We use PowerShell to collect data and the default behavior is scripts are disabled.

Try running this command in an elevated PowerShell prompt:
Set-ExecutionPolicy RemoteSigned

View solution in original post

saabsystems
Explorer

Hi bsonposh,

Thanks, that worked perfectly - I don't use Powershell often so this hadn't occurred to me.

Thanks again!

Cheers,
Jake.

0 Karma

bsonposh
Communicator

On your XenApp Servers have you set the execution policy for PowerShell? We use PowerShell to collect data and the default behavior is scripts are disabled.

Try running this command in an elevated PowerShell prompt:
Set-ExecutionPolicy RemoteSigned

Get Updates on the Splunk Community!

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

Watch On Demand the Tech Talk on November 6 at 11AM PT, and empower your SOC to reach new heights! Duration: ...

Splunk Observability as Code: From Zero to Dashboard

For the details on what Self-Service Observability and Observability as Code is, we have some awesome content ...