Splunk Search

Issue with displaying CPU, Mem & Disk data on the dashboard of Template for Citrix XenDesktop 7

aknsun
Path Finder

Hi,

I have deployed the Template for Citrix XenDesktop 7 with the TA-XD7-Broker add-on deployed on the brokers. However when I use the dashboards that display CPU, Mem & Disk, it doesn't show up anything. Other dashboards seem to work fine and able to display information. Upon looking at the underlying queries and removing the SiteName and running searches, it seems to work.

I have already set the "uncheck Case sensitive match" for the siteHosts lookup definition.

If I search the Index, I can see that I get a total of 20 sourcetypes, which includes the Perfmonmk: sourcetypes.

However if I run the query xd_index SiteName="" (Ex: xd_index SiteName="ABCD"), it just returns the following 4 sourcetypes

xendesktop:7:session
xendesktop:7:machine
xendesktop:7:application
xendesktop:7:controller

And this seems to be the reason why the dashboards fail as the Perfmonmk: sourcetypes are not available when using SiteName.

Has anyone seen this issue before. Any idea why this may be happening?

Thanks,
AKN

0 Karma

aknsun
Path Finder

@jconger Hi Jason,

Wondering if you can provide input on the above issue?

Thanks.
AKN

0 Karma
Get Updates on the Splunk Community!

Infographic provides the TL;DR for the 2023 Splunk Career Impact Report

We’ve been shouting it from the rooftops! The findings from the 2023 Splunk Career Impact Report showing that ...

Splunk Lantern | Getting Started with Edge Processor, Machine Learning Toolkit ...

Splunk Lantern is Splunk’s customer success center that provides advice from Splunk experts on valuable data ...

Enterprise Security Content Update (ESCU) | New Releases

In the last month, the Splunk Threat Research Team (STRT) has had 2 releases of new security content via the ...