Hello.
I try to implement the Splunk App for XenApp and have a problem with the session performance information.
The sourcetype="PerfmonMk:ICASession" shows me just one user session of more then 30 running session and the _Server_Total.
06/18/2013 10:38:18.549 +0200 collection=ICASession category=ICASession object=ICA_Session instance Latency_-_Last_Recorded Latency_-_Session_Average Latency_-_Session_Deviation Output_Session_Bandwidth Input_Session_Bandwidth Output_Session_Compression Input_Session_Compression Output_Session_Line_Speed Input_Session_Line_Speed Output_LPT_1_Bandwidth Input_LPT_1_Bandwidth Output_LPT_2_Bandwidth Input_LPT_2_Bandwidth Output_COM_1_Bandwidth Input_COM_1_Bandwidth Output_COM_2_Bandwidth Input_COM_2_Bandwidth Output_Printer_Bandwidth Input_Printer_Bandwidth Output_COM_Bandwidth Input_COM_Bandwidth Output_Drive_Bandwidth Input_Drive_Bandwidth Output_Clipboard_Bandwidth Input_Clipboard_Bandwidt Output_ThinWire_Bandwidth Input_ThinWire_Bandwidth Output_Audio_Bandwidth Input_Audio_Bandwidth Output_Management_Bandwidth Input_Management_Bandwidth Output_Licensing_Bandwidth Input_Licensing_Bandwidth Output_VideoFrame_Bandwidth Input_VideoFrame_Bandwidth Output_PN_Bandwidth Input_PN_Bandwidth Output_Seamless_Bandwidth Input_Seamless_Bandwidth Output_Font_Data_Bandwidth Input_Font_Data_Bandwidth Output_Text_Echo_Bandwidth Input_Text_Echo_Bandwidth Output_Control_Channel_Bandwidth Input_Control_Channel_Bandwidth Output_SpeedScreen_Data_Channel_Bandwidth Input_SpeedScreen_Data_Channel_Bandwidth Output_SmartCard_Channel_Bandwidth Input_SmartCard_Channel_Bandwidth Output_RAVE_Channel_Bandwidth Input_RAVE_Channel_Bandwidth Output_TWAIN_Channel_Bandwidth Input_TWAIN_Channel_Bandwidth Output_SSPI_Channel_Bandwidth Input_SSPI_Channel_Bandwidth Output_HDX_Media_Stream_for_Flash_Channel_Bandwidth Input_HDX_Media_Stream_for_Flash_Channel_Bandwidth ICA-tcp_192_(UserA) 78 160 92 3416 360 40 110 1635168 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 3362 0 0 0 0 0 0 0 0 0 0 0 16 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 _Server_Total 0 0 0 94440 7424 42 121 0 0 0 0 0 0 0 0 0 0 1472 16 0 0 0 0 0 0 101144 0 0 0 0 0 0 0 0 0 0 0 1256 8 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
Behind is a XenApp 5 Farm, Splunk 5.0.2 and the current XenApp App 1.0.3.
Thanks!
Dominic
Hallo Dominic,
actually we just plan to implement Splunk, so I can't give you an answer on your question. Try to ask Splink support.
Sorry!
Michael