Release notes for the Content Pack for Monitoring Citrix

The following sections explain the contents of the current and past releases of the Content Pack for Monitoring Citrix.

Version 1.1.0

Version 1.1.0 of the Content Pack for Monitoring Citrix was released on February 12, 2026 as part of the Splunk App for Content Packs 2.5.0.

New features

New feature or enhancement Description
Splunk 10.2 support Certified the content pack for Splunk 10.2.

Fixed issues

Issue number Description
ITSI-43114 The content pack is missing the saved searches that are required to import Citrix services and entities.

Version 1.0.2

Version 1.0.2 of the Content Pack for Monitoring Citrix was released on October 28, 2021.

Table 1. New features
New feature or enhancement Description
Fixed invalid references to KPI Base searches in Service templates This fix applies to Content Pack for Monitoring Citrix that is packaged in Splunk App for Content Packs. Invalid references to KPI base searches in Service templates have been updated.
New correlation searches The following correlation searches have been added to the content pack:
  • Delivery Controller License Failure
  • Delivery Controller License Repair
New KPI Base searches The following KPI Base searches have been added to the content pack:
  • DA-ITSI-WEBSERVER:ActivityClone
  • TA-ITSI-CITRIX-XD7-ControllerStats
  • TA-ITSI-CITRIX-XD7-DeliveryGroupStats
  • TA-ITSI-CITRIX-XD7-HostVDALogonStats
  • TA-ITSI-CITRIX-XD7-LaunchFailureStats
  • TA-ITSI-CITRIX-XD7-LicensingStats
  • TA-ITSI-CITRIX-XD7-MachineCatalogStats
  • TA-ITSI-CITRIX-XD7-SiteUserStats

Fixed issues

Date filed Issue number Description
2021-10-19 ITSI-17379 Upgrading from 4.9.0 to 4.9.2 creates a danging KPI base search error.

Version 1.0.0

The following table describes the contents of BACKUP-CP-CITRIX-1.0.0.zip:

New feature or enhancement Description
Saved searches The following saved service and entity discovery searches:
  • TA-ITSI-CITRIX-XD7-Citrix_Delivery_Group_Service_Entity_Importer
  • TA-ITSI-CITRIX-XD7-Citrix_Delivery_Group_Service_Importer
  • TA-ITSI-CITRIX-XD7-Citrix_Machine_Catalog_Service_Entity_Importer
  • TA-ITSI-CITRIX-XD7-Citrix_Machine_Catalog_Service_Importer
  • TA-ITSI-CITRIX-XD7-Citrix_Sites_By_Controller_Importer
  • TA-ITSI-CITRIX-XD7-Citrix_Sites_Importer
  • TA-ITSI-CITRIX-XD7-Citrix_Storefront_Entity_Importer
  • TA-ITSI-CITRIX-XD7-Citrix_VDA_Delivery_Group_Services_Importer
  • TA-ITSI-CITRIX-XD7-Citrix_VDA_Entity_Importer
  • TA-ITSI-CITRIX-XD7-Citrix_VDA_Machine_Catalog_Services_Importer
  • TA-ITSI-CITRIX-XD7-Gateway_Entity_Importer
  • TA-ITSI-CITRIX-XD7-Gateway_Service_Importer
  • TA-ITSI-CITRIX-XD7-Storefront_Service_Importer
Service templates The following Citrix service templates:
  • Citrix XenDesktop Delivery Group Template
  • Citrix XenDesktop Gateway Template
  • Citrix XenDesktop Machine Catalog Template
  • Citrix XenDesktop Site Template
  • Citrix XenDesktop Storefront Template
  • Citrix XenDesktop VDA Delivery Group Template
  • Citrix XenDesktop VDA Machine Catalog Template
Correlation searches The following Citrix correlation searches:
  • Citrix Broker DB Connection Lost
  • Citrix Broker DB Connection Restored
  • Citrix Critical Services
  • Citrix Netscaler Logon Failures
  • Citrix Netscaler Logon Success
  • Citrix Session Disconnect Event
  • Citrix Session Reconnect Event
Base searches The following Citrix KPI base searches:
  • TA-ITSI-CITRIX-XD7-AppCrashHang
  • TA-ITSI-CITRIX-XD7-DGSessionStats
  • TA-ITSI-CITRIX-XD7-GatewayStats
  • TA-ITSI-CITRIX-XD7-MCSessionStats
  • TA-ITSI-CITRIX-XD7-SessionStats
  • TA-ITSI-CITRIX-XD7-VDALoad

Known issues

  • SAI and Windows event-based perfmon overlap data. KPIs are built using SAI metrics.
  • SAI and Windows TA/XD WinEventLog creation overlaps. Pick one and update the correlation searches and KPIs to use the proper sourcetypes.
  • VDA ICA performance metrics are still in event format, not metrics.
  • The event log errors KPIs used throughout this content pack are not efficient. They use only sourcetype and no indexes because of all of the different places wineventlogs can be sent.
  • If there are multiple Citrix sites, the gateway and storefront services need to be given unique names.