Splunk Search

Issue with displaying CPU, Mem & Disk data on the dashboard of Template for Citrix XenDesktop 7

aknsun
Path Finder

Hi,

I have deployed the Template for Citrix XenDesktop 7 with the TA-XD7-Broker add-on deployed on the brokers. However when I use the dashboards that display CPU, Mem & Disk, it doesn't show up anything. Other dashboards seem to work fine and able to display information. Upon looking at the underlying queries and removing the SiteName and running searches, it seems to work.

I have already set the "uncheck Case sensitive match" for the siteHosts lookup definition.

If I search the Index, I can see that I get a total of 20 sourcetypes, which includes the Perfmonmk: sourcetypes.

However if I run the query xd_index SiteName="" (Ex: xd_index SiteName="ABCD"), it just returns the following 4 sourcetypes

xendesktop:7:session
xendesktop:7:machine
xendesktop:7:application
xendesktop:7:controller

And this seems to be the reason why the dashboards fail as the Perfmonmk: sourcetypes are not available when using SiteName.

Has anyone seen this issue before. Any idea why this may be happening?

Thanks,
AKN

0 Karma

aknsun
Path Finder

@jconger Hi Jason,

Wondering if you can provide input on the above issue?

Thanks.
AKN

0 Karma
Get Updates on the Splunk Community!

What's New in Splunk Observability Cloud and Splunk AppDynamics - May 2025

This month, we’re delivering several new innovations in Splunk Observability Cloud and Splunk AppDynamics ...

Getting Started with Splunk Artificial Intelligence, Insights for Nonprofits, and ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Splunk Observability Cloud’s AI Assistant in Action Series: Identifying Unknown ...

Agentic AI powers the Splunk AI Assistant within the Splunk Observability Cloud interface to help you quickly ...