Splunk Search

Issue with displaying CPU, Mem & Disk data on the dashboard of Template for Citrix XenDesktop 7

aknsun
Path Finder

Hi,

I have deployed the Template for Citrix XenDesktop 7 with the TA-XD7-Broker add-on deployed on the brokers. However when I use the dashboards that display CPU, Mem & Disk, it doesn't show up anything. Other dashboards seem to work fine and able to display information. Upon looking at the underlying queries and removing the SiteName and running searches, it seems to work.

I have already set the "uncheck Case sensitive match" for the siteHosts lookup definition.

If I search the Index, I can see that I get a total of 20 sourcetypes, which includes the Perfmonmk: sourcetypes.

However if I run the query xd_index SiteName="" (Ex: xd_index SiteName="ABCD"), it just returns the following 4 sourcetypes

xendesktop:7:session
xendesktop:7:machine
xendesktop:7:application
xendesktop:7:controller

And this seems to be the reason why the dashboards fail as the Perfmonmk: sourcetypes are not available when using SiteName.

Has anyone seen this issue before. Any idea why this may be happening?

Thanks,
AKN

0 Karma

aknsun
Path Finder

@jconger Hi Jason,

Wondering if you can provide input on the above issue?

Thanks.
AKN

0 Karma
Get Updates on the Splunk Community!

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...

Splunk MCP & Agentic AI: Machine Data Without Limits

Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization uses ...