Get started

• Citrix Endpoint Management data source

• Citrix Gateway data source

• Citrix Remote Browser Isolation data source

• Citrix Secure Private Access data source

• Citrix Virtual Apps and Desktops and Citrix DaaS data source

• Microsoft Active Directory and Azure Active Directory integration

• Microsoft Graph Security integration

Security Information and Event Management (SIEM) integration and get started

• Splunk integration

• Splunk architecture with Citrix Analytics add-on application

• Citrix Analytics dashboards for Splunk

• Configuration issues with Citrix Analytics add-on for Splunk

• Microsoft Sentinel integration

• Citrix Analytics workbook for Microsoft Sentinel

• Troubleshooting guidance for Sentinel Integration via Logstash

• Elasticsearch integration

• SIEM integration using Kafka or Logstash based data connector

• Citrix Analytics data format for SIEM

• Leveraging Citrix Analytics SIEM Data Model for Threat Analysis and Data Correlation

• Troubleshooting Data Exports

Example Sigma Signatures for Security Insights

• Compromised endpoints

• Insider threats

• Data exfiltration

Citrix user risk indicators

• Citrix Endpoint Management risk indicators

• Citrix Gateway risk indicators

• Citrix Secure Private Access risk indicators

• Citrix Virtual Apps and Desktops and Citrix DaaS risk indicators

• Provide feedback for User Risk indicators

Self-service search

• Self-service search for Authentication

• Self-service search for Gateway

• Self-service search for Policies

• Self-service search for Remote Browser Isolation

• Self-service search for Secure Private Access

• Self-service search for Apps and Desktops

Troubleshoot Citrix Analytics for Security and Performance

• Verify anonymous users as legitimate users

• Troubleshoot event transmission issues from a data source

• Trigger Virtual Apps and Desktops events, SaaS events, and verifying event transmission

• No user events received from supported Citrix Workspace app version

• Configured Session Recording server fails to connect

• Unable to connect StoreFront server with Citrix Analytics