Documentation

Contents
Contents
Contents
Contents
!
This documentation does not apply to the most recent version of uberAgent. Click here for the latest version.

User Logon Metrics

Active Directory Logon Script Processing

uberAgent collects the duration Active Directory logon scripts.

Details

  • Source type: uberAgent:Logon:ADLogonScriptTimeMs
  • Used in dashboards: Session Info: Citrix, Session Info: VMware, User Logon Duration, User Logon Duration – Group Policy, User Session Overview, User Sessions, Single Machine Detail, Single Logon, Single User Detail
  • Enabled through configuration setting: LogonDetail
  • Related configuration settings: n/a

List of Fields in the Raw Agent Data

Field Description Data type Unit Measurement type Example
SessionGUID Unique identifier that is generated by uberAgent when the session is created.
Valid for this session only.
String Snapshot 00000002-f295-9109-e7c7-c964011dd401
SessionID Unique identifier that is generated by the machine when the session is created.
Will be reassigned to other sessions after logoff.
Number Snapshot 3
User User name String Snapshot Domain\JohnDoe
ADLogonScriptTimeMs Active Directory logon script processing time Number ms Sum 358

Group Policy Processing

Besides the total Group Policy processing time, uberAgent collects DC discovery time and loopback mode.

Details

  • Source type: uberAgent:Logon:GroupPolicyProcessingTimes
  • Used in dashboards: Session Info: Citrix, Session Info: VMware, User Logon Duration, User Logon Duration – Group Policy, User Session Overview, User Sessions, Single Machine Detail, Single Logon, Single User Detail
  • Enabled through configuration setting: LogonDetail
  • Related configuration settings: n/a

List of Fields in the Raw Agent Data

Field Description Data type Unit Measurement type Example
SessionGUID Unique identifier that is generated by uberAgent when the session is created.
Valid for this session only.
String Snapshot 00000002-f295-9109-e7c7-c964011dd401
SessionID Unique identifier that is generated by the machine when the session is created.
Will be reassigned to other sessions after logoff.
Number Snapshot 3
User User name String Snapshot Domain\JohnDoe
GroupPolicyTotalProcessingTimeMs Total Group Policy processing time Number ms Sum 250
DcDiscoveryTimeMs Domain controller discovery time Number ms Sum 10
LoopbackMode Group Policy loopback mode. Possible values: replace, merge, no loopback String Snapshot replace

Group Policy CSE Detail

uberAgent collects detailed information about Client-Side-Extensions (CSEs) like name, duration and return code.

Details

  • Source type: uberAgent:Logon:GroupPolicyCSEDetail
  • Used in dashboards: Session Info: Citrix, Session Info: VMware, User Logon Duration, User Logon Duration – Group Policy, User Session Overview, User Sessions, Single Machine Detail, Single Logon, Single User Detail
  • Enabled through configuration setting: LogonDetail
  • Related configuration settings: n/a

List of Fields in the Raw Agent Data

Field Description Data type Unit Measurement type Example
SessionGUID Unique identifier that is generated by uberAgent when the session is created.
Valid for this session only.
String Snapshot 00000002-f295-9109-e7c7-c964011dd401
SessionID Unique identifier that is generated by the machine when the session is created.
Will be reassigned to other sessions after logoff.
Number Snapshot 3
User User name String Snapshot Domain\JohnDoe
CseName Client-side extension name String Snapshot Citrix Group Policy
CseDurationS Client-side extension processing time Number s Sum 5.40
CseGPONames Group Policy where client-side extension is configured String Snapshot Default Domain Policy
CseReturnCode Client-side extension processing return code. Everything except 0 is bad. Number Snapshot 0

Group Policy Logon Script

uberAgent collects the duration Group Policy logon scripts.

Details

  • Source type: uberAgent:Logon:GroupPolicyLogonScriptTimeMs
  • Used in dashboards: Session Info: Citrix, Session Info: VMware, User Logon Duration, User Logon Duration – Group Policy, User Session Overview, User Sessions, Single Machine Detail, Single Logon, Single User Detail
  • Enabled through configuration setting: LogonDetail
  • Related configuration settings: n/a

List of Fields in the Raw Agent Data

Field Description Data type Unit Measurement type Example
SessionGUID Unique identifier that is generated by uberAgent when the session is created.
Valid for this session only.
String Snapshot 00000002-f295-9109-e7c7-c964011dd401
SessionID Unique identifier that is generated by the machine when the session is created.
Will be reassigned to other sessions after logoff.
Number Snapshot 3
User User name String Snapshot Domain\JohnDoe
GroupPolicyLogonScriptTimeMs Group Policy logon script processing time Number ms Sum 358

Logon Performance

uberAgent collects logon performance information like disk footprint and process start count.

Details

  • Source type: uberAgent:Logon:LogonPerformance
  • Used in dashboards: Session Info: Citrix, Session Info: VMware, User Logon Duration, User Logon Duration – Group Policy, User Session Overview, User Sessions, Single Machine Detail, Single Logon, Single User Detail
  • Enabled through configuration setting: LogonDetail
  • Related configuration settings: n/a

List of Fields in the Raw Agent Data

Field Description Data type Unit Measurement type Example
ProcessStartCount Number of processes started Number Count 8
IOCountRead Count of read I/O operations Number Count 100
IOCountWrite Count of write I/O operations Number Count 100
IOMBRead Amount of read I/O operation data volume Number MB Sum 50
IOMBWrite Amount of write I/O operation data volume Number MB Sum 50
IOLatencyReadMs I/O read operation duration divided by count of read I/O operations Number ms Average 358
IOLatencyWriteMs I/O write operation duration divided by count of write I/O operations Number ms Average 358

Logon Processes

Detailed performance data about all processes active during user logon like process start time and lifetime duration, commandline, executable path and CPU footprint.

Details

  • Source type: uberAgent:Process:LogonProcesses
  • Used in dashboards: Single Logon
  • Related configuration settings: n/a

List of Fields in the Raw Agent Data

Field Description Data type Unit Measurement type Example
ProcName Process name String Snapshot chrome.exe
ProcID Process ID Number Snapshot 456
ProcParentName Parent process name String Snapshot PowerShell.exe
ProcParentID Parent process ID Number Snapshot 789
ProcUser User who ran the process String Snapshot Domain\JohnDoe
AppId Associated application ID. Used by uberAgent to lookup application names and populate field AppName. String Snapshot GglChrm
AppVersion Associated application version String Snapshot 67.0.3396.99
LogonProcType uberAgent groups processes running during logon into types. Possible values: Other, Userinit, AppSetup, Active Setup, AD logon script, GP logon script, Shell,RES Workspace Manager shell,RES Workspace Manager shell child,GP software installation, Run once, Initial program, User profile, Group Policy, Session setup, First logon animation String Snapshot GP logon script
ProcStartTimeRelativeMs Process relative start time Number ms Snapshot 16764
ProcLifetimeMs Process lifetime Number ms Sum 73615
ProcCmdline Process command line String Snapshot C:\Program Files (x86)\Google\Chrome\Application\chrome.exe –url http://vastlimits.com
ProcPath Process path String Snapshot C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
ProcCPUTimeMs Process consumed CPU time Number ms Sum 11859
ProcIOReadCount Process I/O operation read count Number Count 2000
ProcIOWriteCount Process I/O operation write count Number Count 990
ProcIOReadMB Process I/O operation read data volume Number MB Sum 100.05
ProcIOWriteMB Process I/O operation write data volume Number MB Sum 16.06
ProcIOLatencyReadMs Process I/O operation read latency String ms Average 300
ProcIOLatencyWriteMs Process I/O operation write latency String ms Average 300
ProcWorkingSetMB Process consumed RAM Number MB Snapshot 500.06
ProcNetKBPS Process generated network traffic Number KB Sum 19.18
SessionGUID Unique identifier that is generated by uberAgent when the session is created.
Valid for this session only.
String Snapshot 00000002-f295-9109-e7c7-c964011dd401
SessionID Unique identifier that is generated by the machine when the session is created.
Will be reassigned to other sessions after logoff.
Number Snapshot 3
TotalLogonDurationMs Total logon duration Number ms Sum 40000
SortOrder Sort order number to sort the table Logon process performance on the Single Logon dashboard correctly. Number Snapshot 29

List of Calculated Fields

Field Description Data type Unit Measurement type Where available Example
AppName Associated application name String Snapshot Splunk data model, Splunk SPL Google Chrome

Profile Load Time

uberAgent collects the duration of user profile loading (Microsoft user profile service and Citrix Profile Management).

Details

  • Source type: uberAgent:Logon:ProfileLoadTimeMs
  • Used in dashboards: Session Info: Citrix, Session Info: VMware, User Logon Duration, User Logon Duration – Group Policy, User Session Overview, User Sessions, Single Machine Detail, Single Logon, Single User Detail
  • Enabled through configuration setting: LogonDetail
  • Related configuration settings: n/a

List of Fields in the Raw Agent Data

Field Description Data type Unit Measurement type Example
SessionGUID Unique identifier that is generated by uberAgent when the session is created.
Valid for this session only.
String Snapshot 00000002-f295-9109-e7c7-c964011dd401
SessionID Unique identifier that is generated by the machine when the session is created.
Will be reassigned to other sessions after logoff.
Number Snapshot 3
User User name String Snapshot Domain\JohnDoe
CitrixPMLoadTimeMs User profile loading time – Citrix Profile Management Number ms Sum 40000
ProfileLoadTimeMs User profile loading time – Microsoft user profile service Number ms Sum 40000

RES Workspace Shell Startup

uberAgent collects information about RES ONE Workspace shell startup time.

Details

  • Source type: uberAgent:Logon:ResWmProcessingTimeMs
  • Used in dashboards: Session Info: Citrix, Session Info: VMware, User Logon Duration, User Logon Duration – Group Policy, User Session Overview, User Sessions, Single Machine Detail, Single Logon, Single User Detail
  • Enabled through configuration setting: LogonDetail
  • Related configuration settings: n/a

List of Fields in the Raw Agent Data

Field Description Data type Unit Measurement type Example
SessionGUID Unique identifier that is generated by uberAgent when the session is created.
Valid for this session only.
String Snapshot 00000002-f295-9109-e7c7-c964011dd401
SessionID Unique identifier that is generated by the machine when the session is created.
Will be reassigned to other sessions after logoff.
Number Snapshot 3
User User name String Snapshot Domain\JohnDoe
ResWmProcessingTimeMs RES ONE Workspace shell startup time Number ms Sum 358

Session Logon

uberAgent collects information about session logon like session logon time and AD logon server.

Details

  • Source type: uberAgent:Logon:SessionLogonTime
  • Used in dashboards: Session Info: Citrix, Session Info: VMware, User Logon Duration, User Logon Duration – Group Policy, User Session Overview, User Sessions, Single Machine Detail, Single Logon, Single User Detail
  • Enabled through configuration setting: LogonDetail
  • Related configuration settings: n/a

List of Fields in the Raw Agent Data

Field Description Data type Unit Measurement type Example
SessionGUID Unique identifier that is generated by uberAgent when the session is created.
Valid for this session only.
String Snapshot 00000002-f295-9109-e7c7-c964011dd401
SessionID Unique identifier that is generated by the machine when the session is created.
Will be reassigned to other sessions after logoff.
Number Snapshot 3
User User name String Snapshot Domain\JohnDoe
SessionLogonTime Time when the user logon started String Snapshot 2018-07-23 08:50:14
PreLogonInitTimeMs Time from session creation until user logon (more information) Number ms Sum 358
SiteName Active Directory site name String Snapshot Default-First-Site-Name
LogonServer Authenticating Active Directory domain controller String Snapshot DC1

Session End

uberAgent collects the session end time.

Details

  • Source type: uberAgent:Logon:SessionEnd
  • Used in dashboards: Session Info: Citrix, Session Info: VMware, User Logon Duration, User Logon Duration – Group Policy, User Session Overview, User Sessions, Single Machine Detail, Single Logon, Single User Detail
  • Enabled through configuration setting: LogonDetail
  • Related configuration settings: n/a

List of Fields in the Raw Agent Data

Field Description Data type Unit Measurement type Example
SessionGUID Unique identifier that is generated by uberAgent when the session is created.
Valid for this session only.
String Snapshot 00000002-f295-9109-e7c7-c964011dd401
SessionID Unique identifier that is generated by the machine when the session is created.
Will be reassigned to other sessions after logoff.
Number Snapshot 3
User User name String Snapshot Domain\JohnDoe
SessionEndTime Time when the session ended String Snapshot 2018-07-23 10:06:02
SessionDurationMs Period of time between SessionLogonTime and SessionEndTime Number ms Sum 800000

Shell startup time

uberAgent collects the duration of shell startup (normally explorer.exe).

Details

  • Source type: uberAgent:Logon:ShellStartupTimeMs
  • Used in dashboards: Session Info: Citrix, Session Info: VMware, User Logon Duration, User Logon Duration – Group Policy, User Session Overview, User Sessions, Single Machine Detail, Single Logon, Single User Detail
  • Enabled through configuration setting: LogonDetail
  • Related configuration settings: n/a

List of Fields in the Raw Agent Data

Field Description Data type Unit Measurement type Example
SessionGUID Unique identifier that is generated by uberAgent when the session is created.
Valid for this session only.
String Snapshot 00000002-f295-9109-e7c7-c964011dd401
SessionID Unique identifier that is generated by the machine when the session is created.
Will be reassigned to other sessions after logoff.
Number Snapshot 3
User User name String Snapshot Domain\JohnDoe
ShellStartupTimeMs Shell startup time. Typically Windows Explorer. Number ms Sum 358

Total logon time

uberAgent collects the total duration of every logon.

Details

  • Source type: uberAgent:Logon:TotalLogonTimeMs
  • Used in dashboards: Session Info: Citrix, Session Info: VMware, User Logon Duration, User Logon Duration – Group Policy, User Session Overview, User Sessions, Single Machine Detail, Single Logon, Single User Detail
  • Enabled through configuration setting: LogonDetail
  • Related configuration settings: n/a

List of Fields in the Raw Agent Data

Field Description Data type Unit Measurement type Example
SessionGUID Unique identifier that is generated by uberAgent when the session is created.
Valid for this session only.
String Snapshot 00000002-f295-9109-e7c7-c964011dd401
SessionID Unique identifier that is generated by the machine when the session is created.
Will be reassigned to other sessions after logoff.
Number Snapshot 3
User User name String Snapshot Domain\JohnDoe
TotalLogonTimeMs Total logon duration is defined as the time from the actual logon until the shell is fully initialized. Number ms Sum 40000

Leave a Reply

Your email address will not be published. Required fields are marked *