Fixed issues

Last published : Nov 06, 2026
The following issues have been fixed in uberAgent 7.5.1:
Related information
uberAgent 7.5.1

Agent

All platforms

  • : the attribute Altitude may be parsed incorrectly on non-English systems.
  • : fixed handling of receiver names containing special characters.
  • : some browser web request events were discarded due to missing performance data. This happens if content script injection is blocked, e.g., via a content security policy (CSP).
  • : fixed an issue where internally cached Kafka schema IDs don't match their corresponding sourcetypes (http status code 422). This can happen when the state of the schema registry is reset (e.g., by recreating a Docker container).

Windows

  • : security enhancements in uberAgent's process driver.
  • : fixed an issue where a partition is skipped in some rare cases.
  • : fixed wrong path in Register-uAIEExtension.cmd and Deregister-uAIEExtension.cmd scripts.
  • : the time field is filled for all events sent to the ETW receiver.
  • : fixed high CPU usage in rare cases caused by CCFM.
  • : incremented Citrix OData API version from v2 to v3.
  • : resolved issue where high system load conditions could prevent ProcessStartup metric data from being properly transmitted to configured backends.
  • : resolved issue where the agent could crash if an Authenticode check failed.
  • : fixed issue where Windows Hello Enhanced Sign-in Security (ESS) configurations could cause "Failed to parse Hashtable!" errors.
  • : fixed multiple vulnerabilities with Unicode characters in path names.
  • : scheduled task monitoring can now be enabled independently of EnableESA. Previously, EnableESA had to be enabled first.
  • : fixed non-functioning determination of performance counter metric.
  • : events sent to Azure Event Hubs are split into multiple parts if they exceed 260,000 characters.
  • : fixed a race condition leading to Citrix policy updates being ignored.
  • : events sent to the ETW receiver are split into multiple parts if they exceed 64,000 characters.
  • : configuration option LogPath is now configurable via Group Policy.
  • : fixed the calculation of system CPU usage on systems with multiple processor groups (field CPUUsagePercent in sourcetype uberAgent:System:SystemPerformanceSummary2).
  • : the agent would log to a custom log-path defined in Group Policy even when not configured to use GPO as a configuration source.
  • : removed the hard-coded TLS version when querying data from NetScaler.
  • : fixed a minor memory leak in the error-handling path for session connection state determination.
  • : fixed a rare issue where the network driver could cause a BSOD during early boot or when uberAgent starts.
  • : fixed an issue where CCFM would incorrectly detect a timestamp change due to an intermittent network connection problem.
  • : added missing proxy support.

macOS

  • : resolved issue with browser helper communication following the upgrade process.
  • : fixed incorrect process-to-application mapping, which caused wrong application names in the process tree dashboard.
  • : optimized the application's self-verification process to accurately identify legitimate instances versus similarly-named processes. This is part of a feature that prevents multiple instances of uberAgent from being started concurrently.
  • : resolved issue with one-shot timer management (Interval is 0) that was causing excessive CPU utilization.
  • : fixed incorrect process version extraction for Apple applications when parsing hang reports.
  • : script output exceeding 64KB could not be collected and the script timed out.
  • : if Spotlight misclassified files as applications, these files would be listed in the application inventory.
  • : fixed high memory usage caused by high filesystem activity, if filesystem monitoring is enabled.

Splunk

  • : the SourceIndex field is now evaluated during SCI score calculation.
  • : added missing German and Japanese translations for the Failed SCI Tests panel on the Security Score dashboard.
  • : some table descriptions on the Single Application Performance dashboard could not be opened.
  • : the Experience Score for the session component login duration now uses the correct weighting.
  • : fixed dashboard layout CSS issue with Splunk 9.4.1+.
  • : Splunk dashboards now include the extended Citrix Site names when grouping by Citrix Site.
  • : fixed incorrect token usage on the Experience Score Overview dashboard.
  • : corrected field calculations for session_ram and app_inputdelay in data model uberAgentUXM_Score.