Fixed issues

December 11, 2025

Contributed by:

The following issues have been fixed in uberAgent 7.5.1:

Agent

All platforms

[I1299]: the attribute Altitude may be parsed incorrectly on non-English systems.
[I1324]: fixed handling of receiver names containing special characters.
[I1370]: some browser web request events were discarded due to missing performance data. This happens if content script injection is blocked, e.g., via a content security policy (CSP).
[I1394]: fixed an issue where internally cached Kafka schema IDs don’t match their corresponding sourcetypes (http status code 422). This can happen when the state of the schema registry is reset (e.g., by recreating a Docker container).

Windows

[I1264, I1265]: security enhancements in uberAgent’s process driver.
[I1297]: fixed an issue where a partition is skipped in some rare cases.
[I1341]: fixed wrong path in Register-uAIEExtension.cmd and Deregister-uAIEExtension.cmd scripts.
[I1358]: the time field is filled for all events sent to the ETW receiver.
[I1362]: fixed high CPU usage in rare cases caused by CCFM.
[I1369]: incremented Citrix OData API version from v2 to v3.
[I1372]: resolved issue where high system load conditions could prevent ProcessStartup metric data from being properly transmitted to configured backends.
[I1375]: resolved issue where the agent could crash if an Authenticode check failed.
[I1376]: fixed issue where Windows Hello Enhanced Sign-in Security (ESS) configurations could cause “Failed to parse Hashtable!” errors.
[I1380]: fixed multiple vulnerabilities with Unicode characters in path names.
[I1384]: scheduled task monitoring can now be enabled independently of EnableESA. Previously, EnableESA had to be enabled first.
[I1389]: fixed non-functioning determination of performance counter metric.
[I1396]: events sent to Azure Event Hubs are split into multiple parts if they exceed 260,000 characters.
[I1404]: fixed a race condition leading to Citrix policy updates being ignored.
[I1409]: events sent to the ETW receiver are split into multiple parts if they exceed 64,000 characters.
[I1424]: configuration option LogPath is now configurable via Group Policy.
[I1443]: fixed the calculation of system CPU usage on systems with multiple processor groups (field CPUUsagePercent in sourcetype uberAgent:System:SystemPerformanceSummary2).
[I1462]: the agent would log to a custom log-path defined in Group Policy even when not configured to use GPO as a configuration source.
[I1463]: removed the hard-coded TLS version when querying data from NetScaler.
[I1471]: fixed a minor memory leak in the error-handling path for session connection state determination.
[I1489]: fixed a rare issue where the network driver could cause a BSOD during early boot or when uberAgent starts.
[I1493]: fixed an issue where CCFM would incorrectly detect a timestamp change due to an intermittent network connection problem.
[I1526]: added missing proxy support.

macOS

[I1327]: resolved issue with browser helper communication following the upgrade process.
[I1335]: fixed incorrect process-to-application mapping, which caused wrong application names in the process tree dashboard.
[I1350]: optimized the application’s self-verification process to accurately identify legitimate instances versus similarly-named processes. This is part of a feature that prevents multiple instances of uberAgent from being started concurrently.
[I1360]: resolved issue with one-shot timer management (Interval is 0) that was causing excessive CPU utilization.
[I1413]: fixed incorrect process version extraction for Apple applications when parsing hang reports.
[I1420]: script output exceeding 64KB could not be collected and the script timed out.
[I1422]: if Spotlight misclassified files as applications, these files would be listed in the application inventory.
[I1494]: fixed high memory usage caused by high filesystem activity, if filesystem monitoring is enabled.

Splunk

[I1250]: the SourceIndex field is now evaluated during SCI score calculation.
[I1263]: added missing German and Japanese translations for the Failed SCI Tests panel on the Security Score dashboard.
[I1371]: some table descriptions on the Single Application Performance dashboard could not be opened.
[I1383]: the Experience Score for the session component login duration now uses the correct weighting.
[I1386]: fixed dashboard layout CSS issue with Splunk 9.4.1+.
[I1428]: Splunk dashboards now include the extended Citrix Site names when grouping by Citrix Site.
[I1444]: fixed incorrect token usage on the Experience Score Overview dashboard.
[I1466]: corrected field calculations for session_ram and app_inputdelay in data model uberAgentUXM_Score.

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Was this helpful

Fixed issues

December 11, 2025

Contributed by:

December 11, 2025

Contributed by:

Fixed issues

Agent

All platforms

Windows

macOS

Splunk

In this article