uberAgent

Changelog and Release Notes

Version 7.4.1

Release Notes

  • Configuration [B1102]: by default, the uberAgent enabled policy will now be enabled when uberAgent is installed using the Citrix Virtual Apps and Desktops (CVAD) setup. Previously, this policy was disabled by default. Citrix policies are only taken into account when uberAgent is installed using the CVAD installer. If uberAgent is not already present on the machine, it will be installed automatically during the CVAD setup. For more details, visit Integrations.

Bugfixes

  • Agent (macOS) [I1360]: resolved issue with one-shot timer management (Interval is 0) that was causing excessive CPU utilization.
  • Agent (Windows) [I1369]: incremented Citrix OData API version from v2 to v3.
  • Agent (Windows) [I1372]: resolved issue where high system load conditions could prevent ProcessStartup metric data from being properly transmitted to configured backends.
  • Agent (Windows) [I1375]: resolved issue where the agent could crash if an Authenticode check failed.
  • Agent (Windows) [I1376]: fixed issue where Windows Hello Enhanced Sign-in Security (ESS) configurations could cause “Failed to parse Hashtable!” errors.
  • Agent (Windows) [I1380]: fixed multiple vulnerabilities with Unicode characters in path names.
  • Agent (Windows) [I1389]: fixed non-functioning determination of performance counter metric.
  • Agent (Windows) [I1404]: fixed a race condition leading to Citrix policy updates being ignored.
  • Agent (Windows) [I1409]: events sent to the ETW receiver are split into multiple parts if they exceed 64,000 characters.
  • Browsers [I1370]: some web request events were discarded due to missing performance data. This happens if content script injection is blocked, e.g., via a content security policy (CSP).
  • CCFM (Windows) [I1362]: fixed high CPU usage in rare cases caused by CCFM.
  • Dashboards [I1263]: added missing German and Japanese translations for the Failed SCI Tests panel on the Security Score dashboard.
  • Dashboards [I1371]: some table descriptions on the Single Application Performance dashboard could not be opened.
  • Splunk [I1250]: the SourceIndex field is now evaluated during SCI score calculation.
  • Splunk [I1383]: the Experience Score for the session component login duration now uses the correct weighting.
  • Splunk [I1386]: fixed dashboard layout CSS issue with Splunk 9.4.1+.

Known issues

  • Agent (Windows) [I1154]: under heavy load the following message may be logged: CheckEventRecord,Events were lost. This may affect uberAgent's per-process disk, network, or UI-responsiveness metrics.
  • Boot monitoring [I1052]: on Windows 11, no information can be retrieved if there is no active session within the data collection period.
  • Browsers [I1085]: on systems with many user sessions the URL of the foreground tab might not match the browser’s window title.
  • Browsers/Firefox add-on [I626]: if the option privacy.resistFingerprinting is set to true, browser metrics are not available due to invalid data being sent from Firefox.
  • Browsers/IE add-on (Windows): metrics are collected incompletely for the configured start page.
  • Browsers/IE add-on (Windows): metrics are not collected on page reload.
  • Browsers/IE add-on (Windows): monitoring does not work if IE is published from Citrix Virtual Apps. It does work from Citrix Virtual Desktops, however.
  • Citrix CVAD/DaaS (Windows): data collection issue if the Citrix Remote Powershell SDK (required for Citrix Cloud monitoring) is installed on a CVAD controller.
  • Citrix CVAD/DaaS (Windows): when running the Citrix VDA on a Citrix delivery controller, some per-machine information is missing.
  • Experience Score [I377]: scheduled searches generate three warnings in Splunk’s _internal index every 30 minutes. The messages look like the following: DateParserVerbose - Failed to parse timestamp in first MAX_TIMESTAMP_LOOKAHEAD (128) characters of event.. However, there is no impact on uberAgent’s functionality.
  • GPU (Windows) [I33]: values for the fields ComputeUsagePercentAllEngines, ComputeUsagePercentEngine0 and similar can be higher than 100 with Intel Iris GPUs on Windows Server 2016 1607.
  • Kafka [I291]: in rare cases, sending data to Kafka results in a SEC_E_BUFFER_TOO_SMALL error message in the logfile. This should have no effect; the transmission is repeated and succeeds on the second try.
  • NetScaler®: in very rare cases, the content of the Virtual Server Performance field vServerName contains spaces in wrong places.
  • Update inventory (Windows): not all installed Windows updates may be reported due to API limitations.
  • User input delay (Windows) [I983]: determining this metric may trigger a handle leak in uberAgent caused by Windows. This was fixed by Microsoft in most OS versions, but still happens on Windows Server 2022 22H2.
  • Volume inventory (macOS): the encryption status of mounted read-only APFS snapshots may not be reported due to API limitations. This includes the root directory volume in a default installation of macOS.
Changelog and Release Notes