Splunk and Citrix XenDesktop

We have a Citrix XenDesktop environment that was deployed before we acquired Splunk so now I’m looking at what it takes to get Splunk setup to gather useful information about our VDI environment. The goal is to use Splunk developed or supported apps/add-ons in order to get support directly from Splunk when needed.

The best one I’ve found so far even thought not directly supported by Splunk is Template for Citrix XenDesktop 7 by Jason Conger. Jason used to work for Citrix but now he’s at Splunk so I think that will be OK. Turns out the app was just updated last week. I’ll have to see what has changed in this update since I’ve had to change some of the Splunk queries that are built into the app as some of the items do not exactly match the spelling of what the Universal Forwarders are sending us. Other than some minor changes the app does work out of the box. I’ve been having some issues trying get the ICA Round Trip Time and the ICA Latency stats but I’m working those.

One of the main goes is to get a single pane of glass for server performance metrics and the information that is in NetScaler Insight Center with some other things thrown in. Once I can get the Citrix VDI stuff figured out I’ll put the solutions here.

Here’s how to contact Jason Conger: http://www.jasonconger.com/.

Here’s the Template for Citrix XenDesktop 7 app on Splunk Base: https://splunkbase.splunk.com/app/1751/#/overview.

Here’s the link to the GitHub repository: https://github.com/splunk/splunk-template-xendesktop-7