Known issues

Agent (Windows) : under heavy load the following message may be logged: CheckEventRecord,Events were lost. This may affect uberAgent's per-process disk, network, or UI-responsiveness metrics\.

Boot monitoring : on Windows 11, no information can be retrieved if there is no active session within the data collection period\.

Browsers : on systems with many user sessions the URL of the foreground tab might not match the browser's window title\.

Browsers/Firefox add-on : if the option privacy.resistFingerprinting is set to true, browser metrics are not available due to invalid data being sent from Firefox\.

Browsers/IE add-on (Windows): metrics are collected incompletely for the configured start page\.

Browsers/IE add-on (Windows): metrics are not collected on page reload\.

Browsers/IE add-on (Windows): monitoring does not work if IE is published from Citrix Virtual Apps\. It does work from Citrix Virtual Desktops, however\.

Citrix CVAD/DaaS (Windows): data collection issue if the Citrix Remote Powershell SDK (required for Citrix Cloud monitoring) is installed on a CVAD controller\.

Citrix CVAD/DaaS (Windows): when running the Citrix VDA on a Citrix delivery controller, some per-machine information is missing\.

Experience Score : scheduled searches generate three warnings in Splunk's _internal index every 30 minutes. The messages look like the following: DateParserVerbose - Failed to parse timestamp in first MAX_TIMESTAMP_LOOKAHEAD (128) characters of event.\. However, there is no impact on uberAgent's functionality\.

GPU (Windows) : values for the fields ComputeUsagePercentAllEngines, ComputeUsagePercentEngine0 and similar can be higher than 100 with Intel Iris GPUs on Windows Server 2016 1607\.

Kafka : in rare cases, sending data to Kafka results in a SEC_E_BUFFER_TOO_SMALL error message in the logfile\. This should have no effect; the transmission is repeated and succeeds on the second try\.

NetScaler: in very rare cases, the content of the Virtual Server Performance field vServerName contains spaces in wrong places\.

Update inventory (Windows): not all installed Windows updates may be reported due to API limitations\.

User input delay (Windows) : determining this metric may trigger a handle leak in uberAgent caused by Windows\. This was fixed by Microsoft in most OS versions, but still happens on Windows Server 2022 22H2\.

Volume inventory (macOS): the encryption status of mounted read-only APFS snapshots may not be reported due to API limitations\. This includes the root directory volume in a default installation of macOS\.