When the foreground window is a browser, uberAgent determines the active tab’s URL and stores it in the SessionFgBrowserActiveTabHost field of the uberAgent:Session:SessionDetail sourcetype.

The SessionFgBrowserActiveTabHost field may be empty even though a browser window is in the foreground if any of the following is true.

Extension Not Installed or Enabled

The SessionFgBrowserActiveTabHost field is determined with the help of uberAgent’s browser extension. If the extension is not installed or enabled in the browser window that is in the foreground, the field cannot be populated.

Private Mode

The uberAgent extension is not active in private mode unless the browser has specifically been configured to run the extension in private windows, too.

Denylist/Allowlist

If a tab’s site URL is excluded by the BrowserWebAppURL_Filter configuration setting uberAgent leaves the SessionFgBrowserActiveTabHost field empty.

Save As or Similar Dialog

While a browser dialog such as Save As or Authention Required is being displayed, the foreground window is not a tab, but that modal dialog. Therefore, uberAgent leaves the foreground tab field SessionFgBrowserActiveTabHost empty. When that happens, the SessionFgWindowTitle field contains the title of the modal dialog, not the title of the previously active tab.

Developer Tools

While a browser’s developer tools window is in the foreground, uberAgent leaves the foreground tab field SessionFgBrowserActiveTabHost empty. When that happens, the SessionFgWindowTitle field contains the title of the developer tools window.