Infrastructure monitoring [Preview]

Citrix Monitor now offers visibility into the operational health of Citrix Virtual Apps and Desktops components. This feature helps you to easily identify, troubleshoot, and resolve issues related to your infrastructure. Currently, the health of the Citrix Provisioning (PVS) and StoreFront components are monitored.

To support this feature, a new Windows executable named Citrix Infrastructure Monitor is introduced for Citrix components. This helps with the collection and transmission of relevant health metrics from PVS or StoreFront servers to Monitor.

This feature helps you to get critical monitoring data sets and proactive alerts regarding the PVS and StoreFront server’s system metrics on a single console in Monitor. Data is collected every five minutes from the monitoring components to ensure the latest information.

This feature aims to enhance operational efficiency by offering proactive monitoring, detailed metrics, and automated alerts, ensuring your Citrix infrastructure runs smoothly and efficiently.

Key features

Real-time monitoring:

  • Continuous monitoring of Citrix infrastructure components such as Citrix Provisioning (PVS) servers and StoreFront.
  • Dashboard views presenting system health, resource utilization, and relevant performance metrics.

Detailed analysis:

  • Provides detailed analysis on the system health metrics such as connectivity status, and service or process status for each component.
  • Details on the resource utilization metrics such as CPU, memory, and disk utilization.

Automated alerts and notifications:

  • Customizable alert thresholds for various metrics and states with granular scopes.
  • Real-time notifications through email and webhooks.

Use-cases

Operational efficiency:

Ensures that Citrix admin teams can maintain high availability and performance of their Citrix servers and services. This feature also helps in minimizing downtime by proactively identifying and alerting admins on issues before they impact significant user groups.

Faster ticket resolution:

Monitors key metrics on server health and performance to evaluate the optimal delivery of virtual applications and desktops to users. Use these metrics to diagnose and resolve user complaints related to performance by analyzing associated components.

Prerequisites

  • Configure HTTPS for Citrix Infrastructure Monitor with Citrix Cloud. This prerequisite is optional but recommended. For more information, see Configure HTTPS for Citrix Infrastructure Monitor.
  • User accounts or permissions required to run Citrix Infrastructure Monitor:
    • User accounts with Windows administrator permissions to install the Citrix Infrastructure Monitor on the endpoint machines.
    • A full administrator user account or a custom role with the following Monitor permissions:

      • Create\Edit\Enable\Delete Alert Policies
      • Create\Edit\Remove Alert Email Server Configuration
      • Dismiss Alerts
      • View Alert Policies
      • View Alerts
      • View Dashboard page
      • View Infrastructure Monitor page
      • To view the Alerts page

Note:

If you don’t have permission to access the Alerts page, the Manage Alerts option is disabled on the Infrastructure Monitoring page.

Getting started with Infrastructure Monitoring

Step 1: Installation of Citrix Infrastructure Monitor

Perform the following steps to complete the installation on the target component to establish connection for secure data collection.

Step 1.1: Identify the target components

Identify the target components such as PVS or StoreFront servers which need to be monitored.

Step 1.2 Download Citrix Infrastructure Monitor

You can download CitrixInfraMonitor.msi from the Citrix downloads page on the target server identified in Step 1.1.

Step 1.3: Run Citrix Infrastructure Monitor

Run the CitrixInfraMonitor.msi installer on the target component by following the instructions in the installation wizard.

Note:

Users with administrative privileges can install and configure Citrix Infrastructure Monitor on the target component.

Citrix Infrastructure Monitor

Once the installation is successful, you can view the Citrix Infrastructure Monitor Service in the Services section:

Citrix Infrastructure Monitor

Step 1.4: Get the registration token

Get the token provided in the RegistrationToken.txt file at C:\ProgramData\Citrix\InfraMonitor\RegistrationToken.txt in the system where Citrix Infrastructure Monitor is installed and keep it ready for use in Step 3: Register Citrix Infrastructure Monitor.

Note:

Once you successfully install CitrixInfraMonitor.msi, the installer creates an exception for the 9595 port. If you are using any third-party firewall, you might have to allow TCP communication for this port manually for using the Citrix Infrastructure Monitoring service.

Step 2: Configure HTTPS for Citrix Infrastructure Monitor

Note:

Citrix Infrastructure Monitor service works in HTTP mode as well and in this case, the following configuration isn’t required. However, we recommend you to use in https mode. Perform the following steps only if you need to configure https for Citrix Infrastructure Monitor.

Step 2.1: Upload the certificate to the machine

  1. Get a PFX certificate for your machine where Citrix Infrastructure Monitor is installed. For more information on PFX file generation, see How to create a PFX file.

    Note:

    You can use password protected PFX files also.

  2. Upload the certificate to the machine to any location.

Step 2.2: Import the certificate to computer certificates

  1. Click Start > Run > type mmc, and then click OK. The Console 1 - [Console Root] window appears.
  2. On the File menu, click Add/Remove Snap-in. The Add or Remove Snap-ins window appears.

    Add or remove snap-in

  3. Under Snap-in, double-click Certificates. The Certificates snap-in window appears.

    Certificate snap

  4. Select Computer account, and then click Next. The Select Computer window appears.

    Local computer

  5. Select Local computer.
  6. Click Finish. The Certificates (Local Computer) section appears on the list of selected snap-ins for the new console.
  7. Click OK.
  8. Expand Certificates, right-click Personal > All Tasks > Import. The Welcome to the Certificate Import Wizard appears.

    Expand certificate

  9. Select Next > Browse Files. Navigate to the location where you uploaded the PFX file, change the file type to All files and then select the respective PFX certificate.

    Certificate import wizard

  10. Enter the PFX Password. You can leave it blank if there is no password.
  11. Click Next.
  12. For the Certificate Store, make sure that the Place all certificates in the following store option is selected and the Certificate store is selected as Personal.

    Certificate store

  13. Click Next.
  14. Review the details and click Finish.
  15. Wait for confirmation. The The import was successful message appears.
  16. Navigate to Certificates > Personal and ensure that the certificate is present.
  17. Delete the PFX certificate file from the machine.

Step 2.3: Provide read access to certificate

  1. Right-click on the imported certificate > All Tasks > Manage Private Keys.
  2. In the dialog that opens, select Add, and then search for Network Service. Click OK.
  3. Select NETWORK SERVICE under Group or user names.
  4. Allow Read access under Permissions for NETWORK SERVICE.
  5. Click OK.

Step 2.4: Obtain the Thumbprint

  1. Double-click on the imported certificate.
  2. In the dialog that opens, navigate to the Details tab and scroll to the bottom.
  3. Click Thumbprint.

    Certificate thumbprint store

  4. Copy the value and keep it ready for the next step.

Step 2.5: Setting the environment variable

  1. Open Control Panel.
  2. Search for environment and select Edit the system environment variables.
  3. Under System Variables (for all users), click New.

    System variable

  4. Specify the Variable name as DIRECTOR_AGENT_HTTPS_CERTIFICATE_THUMBPRINT.
  5. Specify the thumbprint from the previous step under Variable value.
  6. Click OK.

Step 2.6: Restart CitrixInfraMonitorService

  1. Open PowerShell and run the following command:

    Restart-Service CitrixInfraMonitorService
    <!--NeedCopy-->
    
  2. Ensure that the HTTPS is enabled by capturing the CitrixInfraMonitorService module and looking for the log line Start to listen on HTTPS….

    Restart infra monitor

Step 2.7: Enable HTTPs in Monitor configuration

To enable HTTPs in Monitor service, contact Citrix Technical support and request to enable the DirectorAgentEnableHttps setting under the Monitor configuration.

Step 3: Register Citrix Infrastructure Monitor on Monitor UI

Complete the registration on the Monitor UI by performing the following steps.

Step 3.1: Navigate to the Connect Citrix Components page

Click Settings > Connect Citrix Components > Manage.

Or,

Click Infrastructure > Manage.

Create Citrix Components

Create Citrix Components

Step 3.2: Enter component details

On the Connect Citrix Components screen, click Create connection. The Create a connection window appears.

Create connection window

Ensure the citrixinframonitor.msi is downloaded and installed on the target. For more information, see Step 1 in this document. Follow the instructions on the screen, and populate the component details required to establish a secure connection.

  • Select a Component type from the drop-down list. This can be Provisioning Service or StoreFront.
  • Enter the Hostname.
  • Enter the Domain name.
  • Enter the Username of the Provisioning Service or StoreFront machine.
  • Enter the Password of the Provisioning Service or StoreFront machine.
  • Select the Resource location.

Step 3.3: Authorize the connection

Get the Citrix Infrastructure Monitor token from the RegistrationToken.txt file at C:\ProgramData\Citrix\InfraMonitor\RegistrationToken.txt in the system where the Citrix Infrastructure Monitor is installed.

Enter the fetched token details in the Director UI. This authorizes the connection between the site and component.

The token text present in the RegistrationToken.txt file is regenerated when you restart the Citrix Infrastructure Monitor service. After the registration is successful, the token file is deleted from the machine. If you need to recreate a fresh token file for any reason, restart the Citrix Infrastructure Monitor service. For security reasons, the token file is removed after three failed registration attempts with an invalid token.

Step 3.4: Create connection

Once the details are populated, click Create. The created connection is available under the list of connections on the Connect Citrix Components page.

Manage connections

You can view, remove, or edit the connections on the Connect Citrix Components page.

PVS dashboard

View connections

You can view details of all the connected and disconnected components available in this view. The following table describes the different columns of the Create connection page:

Column Description
Host name The FQDN of the server.
Resource location The resource location configured to reach the component.
Type The type of the connection. This can be Provisioning Service and StoreFront.
Version The version of the CitrixInfraMonitor.msi installed on the component.
Created by The name of the admin who created the connection.
Creation date The date on which the connection is established.
Last updated The date on which the connection was last updated.
State The different states are Connecting, Connected, and Disconnected.
 
  • Connecting: This state indicates that it can take approximately five minutes for data to appear for the new component and approximately 10 minutes for the resource utilization data to be available.
 
  • Connected: This state indicates that the connection between the components and the site is up and running.
 
  • Disconnected: This state indicates that the connection between the components and the site is disconnected. Possible reasons for the Disconnected state include server downtime or the site being unable to connect to Citrix Infrastructure Monitor.

Edit the connection

Editing the connection might be required to update the administrator credentials used to establish the Provisioning Service or StoreFront connection.

To edit an existing connection, do the following:

  1. Navigate to the Connect Citrix Components page from the Settings or Infrastructure tab.
  2. On the list of connections table, click the three dots at the end of the row on the component of interest.
  3. Click Edit and update the details as required.

Remove a component

Removing a component is a process of deregistering a Provisioning Service or StoreFront connection from Monitor. Once the deregistration process is complete, new data collection is stopped for the selected component. To remove an existing connection:

  1. Navigate to the Connect Citrix Components page from the Settings or Infrastructure tab.
  2. On the list of connections table, click the three dots at the end of the row on the component of interest.
  3. Click Remove. The connection is deregistered and removed from Monitor.

Note:

Deregistering a component only stops the data flow from the specific component to Monitor. If you need to uninstall Citrix Infrastructure Monitor, uninstall it from the Control Panel.

Infrastructure dashboard

You can see the health values for your components in the Infrastructure Monitoring page. These results help to analyze and troubleshoot issues proactively regarding your infrastructure.

You can filter the Infrastructure Monitoring page by:

  • Host name - Select the host name
  • Reachability - Select Up (server is reachable) or Down (Server isn’t reachable) checkbox
  • Errors - Select Show rows with errors only checkbox.

Use the Manage columns option to choose the data to be seen in your dashboard.

PVS health metrics

Click the Infrastructure tab and then select PVS. The Infrastructure dashboard for PVS appears:

PVS dashboard

The following details are monitored for PVS servers:

Category Metrics Description
Reachability






Host name The name of the PVS machine where Citrix Infrastructure Monitor is installed. This metric is a string value.
PVS Site Name The name of the PVS site. This metric is a string value.
PVS Farm Name The name of the PVS farm. This metric is a string value.
PVS Site ID Displays the site ID of the PVS server. This metric is a string value.
PVS Farm ID Displays the farm ID of the PVS server. This metric is a string value.
Server Status Shows the reachability state of the given server. Possible values are Up, Down, and Unknown.
Last Boot Time Displays the time when the PVS server was last booted.
Last updated Displays the time when the data was collected from the PVS server.
Dependent Services


Streaming Service Displays the status of the streaming service. This metric shows the Windows services status. The possible values are: Not running, Running, Not Installed, and n/a (with help icon).
SOAP Service Displays the status of the Simple Object Access Protocol (SOAP) service. This metric shows the Windows services status. The possible values are: Not running, Running, Not Installed, and n/a (with help icon).
DB Connectivity Displays the status of the database connectivity. If you are using a Citrix Provisioning server version 2402 or earlier, you might get an unknown error. The possible values are Not Connected, Connected, Unknown, and n/a (with help icon).
License Server Reachability Displays whether the license server is reachable or not. If you’re using the Citrix Provisioning server version 2402 or earlier, you might get an unknown error. The possible values are Not Connected, Connected, Unknown, and n/a (with help icon).
Resource Utilization










CPU Usage % Displays the usage of CPU in percentage using a line chart. The value displayed is the latest one at the end of the last 5 mins.
Avg CPU % Displays the average CPU percentage of the PVS server aggregated over the last 10 mins.
Peak CPU % Displays the peak CPU percentage of the PVS server in the last 5 mins.
Memory Usage % Displays the usage of memory in percentage using a stack chart. The value displayed is the latest one at the end of the last 5 mins.
Avg Memory % Displays the average memory percentage of the PVS server aggregated over the last 10 mins.
Peak Memory % Displays the peak memory percentage of the PVS server in the last 5 mins.
Disk IOPS Displays the input and output value of the disk using a line chart.
Avg Disk IOPS % Displays the average disk IOPS of the PVS server aggregated over the last 10 mins.
Peak Disk IOPS % Displays the peak disk IOPS percentage of the PVS server in the last 10 mins.
Disk Latency (Ms) Displays the latency value of the disk using a line chart.
Avg Disk Latency % Displays the average disk latency of the PVS server aggregated over the last 10 mins.
Peak Disk Latency % Displays the peak disk latency percentage of the PVS server in the last 5 mins.
Impact
Total Rejected Logins Number of total failure logins divided by the number of total logins trials.
Device Count Active Displays the total number of active devices in the PVS server. This metric is an integer value.

StoreFront health metrics

Click the Infrastructure tab and then select StoreFront. The Infrastructure dashboard for StoreFront appears:

PVS dashboard

The following details are monitored for StoreFront servers:

Category Metrics Description
Reachability



Host name Displays the name of the StoreFront server. This metric is a string value.
Server Status Displays the status of the StoreFront server. This metric shows the Windows services status. The possible values are: Not running, Running, Not Installed, and n/a (with help icon).
Base URL Status Displays the health of the base URL. If the HTTP status code is 200, the status is UP. Else, the value is Down.
Last Boot Time Displays the time when the StoreFront server was last booted.
Last updated Displays the time when the data was collected from the StoreFront server.
Dependent Services


Domain Service Health of windows service named as domain service. This metric shows the Windows services status. The possible values are: Not running, Running, Not Installed, and n/a (with help icon).
Credential Wallet Service This service is a windows service that is used for storing encrypted passwords. The possible values are: Not running, Running, Not Installed, and n/a (with help icon).
Peer Resolution Service This service is a windows service which is responsible for inter-server group network communication forming a peer mesh of StoreFront servers. The possible values are: Not running, Running, Not Installed, and n/a (with help icon).
WWW Service This metric is the web service of the StoreFront server. This metric shows the Windows services status. The possible values are: Not running, Running, Not Installed, and n/a (with help icon).
Resource Utilization










CPU Usage % Displays the usage of CPU in percentage using a line chart. The value displayed is the latest one at the end of the last five mins.
Avg CPU % Displays the average CPU percentage of the StoreFront server aggregated over the last 10 mins.
Peak CPU % Displays the peak CPU percentage of the StoreFront server in the last five mins. This value helps to decide on the maximum required capacity for a CPU.
Memory Usage % Displays the usage of memory in percentage using a stack chart. The value displayed is the latest one at the end of the last 5 mins.
Avg Memory % Displays the average memory percentage of the StoreFront server aggregated over the last 10 mins.
Peak Memory % Displays the peak memory percentage of the StoreFront server in the last 5 mins.
Disk IOPS Displays the input and output value of the disk using a line chart.
Avg Disk IOPS % Displays the average disk IOPS of the StoreFront server using a float.
Peak Disk IOPS % Displays the peak disk IOPS percentage of the StoreFront server aggregated over the last 10 mins.
Disk Latency (Ms) Displays the latency value of the disk using a line chart.
Avg Disk Latency % Displays the average disk latency of the StoreFront server aggregated over the last 10 mins.
Peak Disk Latency % Displays the peak disk latency percentage of the StoreFront server in the last five mins.
Impact


ICA Certificate Validity Displays the validity of the ICA certificate. The possible values are Expired, Expiring, Valid, and Not Found.
ICA Certificate Chain Validity Displays StoreFront ICA Certificate Chain is valid or not. The possible value is Yes or No.
IIS Certificate Validity Displays the validity of the IIS certificate. The possible values are Expired, Expiring, Valid, and Not Found.
IIS Certificate Chain Validity Displays StoreFront IIS Certificate Chain is valid or not. The possible value is Yes or No.

Create and manage alerts

You can set up alerts for proactively monitoring conditions and scopes of interest to you and reduce alert fatigue. Alerts can be configured with severity, re-alert intervals, notification mediums, and follow the alert lifecycle supported in the product.

For more information, see the Alerts page.