Hello. I try to implement the Splunk App for XenApp and have a problem with the session performance information. The sourcetype="PerfmonMk:ICASession" shows me just one user session of more then 30 running session and the _Server_Total. 06/18/2013 10:38:18.549 +0200 collection=ICASession category=ICASession object=ICA_Session instance Latency_-_Last_Recorded Latency_-_Session_Average Latency_-_Session_Deviation Output_Session_Bandwidth Input_Session_Bandwidth Output_Session_Compression Input_Session_Compression Output_Session_Line_Speed Input_Session_Line_Speed Output_LPT_1_Bandwidth Input_LPT_1_Bandwidth Output_LPT_2_Bandwidth Input_LPT_2_Bandwidth Output_COM_1_Bandwidth Input_COM_1_Bandwidth Output_COM_2_Bandwidth Input_COM_2_Bandwidth Output_Printer_Bandwidth Input_Printer_Bandwidth Output_COM_Bandwidth Input_COM_Bandwidth Output_Drive_Bandwidth Input_Drive_Bandwidth Output_Clipboard_Bandwidth Input_Clipboard_Bandwidt Output_ThinWire_Bandwidth Input_ThinWire_Bandwidth Output_Audio_Bandwidth Input_Audio_Bandwidth Output_Management_Bandwidth Input_Management_Bandwidth Output_Licensing_Bandwidth Input_Licensing_Bandwidth Output_VideoFrame_Bandwidth Input_VideoFrame_Bandwidth Output_PN_Bandwidth Input_PN_Bandwidth Output_Seamless_Bandwidth Input_Seamless_Bandwidth Output_Font_Data_Bandwidth Input_Font_Data_Bandwidth Output_Text_Echo_Bandwidth Input_Text_Echo_Bandwidth Output_Control_Channel_Bandwidth Input_Control_Channel_Bandwidth Output_SpeedScreen_Data_Channel_Bandwidth Input_SpeedScreen_Data_Channel_Bandwidth Output_SmartCard_Channel_Bandwidth Input_SmartCard_Channel_Bandwidth Output_RAVE_Channel_Bandwidth Input_RAVE_Channel_Bandwidth Output_TWAIN_Channel_Bandwidth Input_TWAIN_Channel_Bandwidth Output_SSPI_Channel_Bandwidth Input_SSPI_Channel_Bandwidth Output_HDX_Media_Stream_for_Flash_Channel_Bandwidth Input_HDX_Media_Stream_for_Flash_Channel_Bandwidth ICA-tcp_192_(UserA) 78 160 92 3416 360 40 110 1635168 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 3362 0 0 0 0 0 0 0 0 0 0 0 16 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 _Server_Total 0 0 0 94440 7424 42 121 0 0 0 0 0 0 0 0 0 0 1472 16 0 0 0 0 0 0 101144 0 0 0 0 0 0 0 0 0 0 0 1256 8 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 Behind is a XenApp 5 Farm, Splunk 5.0.2 and the current XenApp App 1.0.3. Thanks! Dominic ... View more

Hi. I try to implement the Splunk App for Citrix XenDesktop and got a problem with the license report. There is just one produkt visible. There are "first" operations in the search string: `citrix_licensing` | `citrix_license_type` | `citrix_license_product` | rename Product as Prod | stats first(ProductName) as Product first(Installed) as Installed first(Available) as Available first(InUse_pct) as InUse_pct first(TypeName) as Type by InUse Prod _time The output of " citrix_licensing | citrix_license_type | citrix_license_product " gives me a lot of products in one event. Thanks, Dominic ... View more