Splunk Search

Issue with displaying CPU, Mem & Disk data on the dashboard of Template for Citrix XenDesktop 7

aknsun
Path Finder

Hi,

I have deployed the Template for Citrix XenDesktop 7 with the TA-XD7-Broker add-on deployed on the brokers. However when I use the dashboards that display CPU, Mem & Disk, it doesn't show up anything. Other dashboards seem to work fine and able to display information. Upon looking at the underlying queries and removing the SiteName and running searches, it seems to work.

I have already set the "uncheck Case sensitive match" for the siteHosts lookup definition.

If I search the Index, I can see that I get a total of 20 sourcetypes, which includes the Perfmonmk: sourcetypes.

However if I run the query xd_index SiteName="" (Ex: xd_index SiteName="ABCD"), it just returns the following 4 sourcetypes

xendesktop:7:session
xendesktop:7:machine
xendesktop:7:application
xendesktop:7:controller

And this seems to be the reason why the dashboards fail as the Perfmonmk: sourcetypes are not available when using SiteName.

Has anyone seen this issue before. Any idea why this may be happening?

Thanks,
AKN

0 Karma

aknsun
Path Finder

@jconger Hi Jason,

Wondering if you can provide input on the above issue?

Thanks.
AKN

0 Karma
Get Updates on the Splunk Community!

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

If you’re unfamiliar, .conf is Splunk’s premier event where the Splunk community, customers, partners, and ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...

Announcing the Migration of the Splunk Add-on for Microsoft Azure Inputs to ...

Announcing the Migration of the Splunk Add-on for Microsoft Azure Inputs to Officially Supported Splunk ...