uberAgent 8.0

Last published : Oct 14, 2026
Related information
What's New
Fixed issuesKnown issues

About the release

This uberAgent release includes new features, improvements and bug fixes.
For installation and upgrade instructions:

What's New

uberAgent for Linux - Now Generally Available

We are excited to announce that uberAgent 8.0 marks the first General Availability release of uberAgent for Linux, extending our user experience monitoring and endpoint security analytics platform beyond Windows and macOS. Linux support covers Ubuntu 22.04+, Red Hat Enterprise Linux 8.10+, and eLux 7 2507+ on x64 architectures, with installation via native .deb and .rpm packages. Key capabilities include session and process performance monitoring, system and disk inventory, network communication tracking, and comprehensive system performance metrics — all managed through local configuration files or Central Config File Management (CCFM). With support for remote session protocols including ICA, RDP, and SSH, uberAgent for Linux is purpose-built for modern enterprise environments spanning physical desktops, virtual infrastructure, and cloud workloads. Please follow this article to install the Linux agent\.

Browser Resource Insights for Google Chrome and Microsoft Edge

uberAgent on Windows and macOS can now collect performance metrics, such as CPU or RAM usage, for each tab and group them by URL. These results are visualized on the new Splunk dashboard, Browser Resource Insights. A new version of the browser extension has been developed to evaluate the new metrics. Please refer to the documentation for more details.

Enhanced Proxy Support

uberAgent now supports fully configurable proxy usage for its outbound HTTP communication. Administrators can define granular destination-to-proxy mappings, and specify authentication for proxies that require credentials. This enables consistent, policy-compliant network routing in tightly controlled or proxy-mandated environments. Please review the documentation for details and configuration examples. If you're configuring a proxy for LAS-licensing, follow this practice guide.
Note:
Configuring a proxy via the configuration file is the new standard. If you have configured a proxy using system variables, you have to adjust your configuration as documented here.

New Self Monitoring Dashboards

uberAgent now comes with three new dashboards — Agent Activity, Configuration Detail and Version Overview — that are specifically designed to provide uberAgent administrators with the tools they need to successfully organize their uberAgent deployment. These dashboards display information such as which configuration method is used, which versions are deployed and when your clients were last seen. The latter helps you to identify endpoints that have stopped sending data.

Improved Multi-Tenant Capabilities of Splunk Lookups

uberAgent's Splunk lookups now effectively support multi-tenant scenarios. Lookup definitions now take into account the index from which the events originated, ensuring that each event in the lookup is unique.

Azure Monitor Sunsetting

uberAgent supported Azure Monitor as backend via its HTTP Data Collector API. This API has been deprecated by Microsoft. It will no longer function after September 14, 2026. Unfortunately, the API’s successor, the Logs Ingestion API, does not meet uberAgent's technical requirements. There is no longer a viable way for uberAgent to send data to Azure Monitor. For this reason, Azure Monitor is no longer a supported backend for uberAgent. For details and alternatives please see Microsoft Azure Monitor (legacy).

Improvements

Agent

All platforms

  • : fixed a bug that prevented ESA from being reliably disabled via configuration on Citrix VDA machines.

Windows

  • : uAQL registry monitoring CPU optimizations (query result caching & additional event types for more granular matching).
  • : logging the start and end of determining session statistics has to be explicitly enabled using TraceLogFilterExpression.
  • : improved the efficiency and performance footprint of uberAgent's kernel-to-service communication.

macOS

  • : enhanced the reliability of ethernet interface internet connectivity detection through improved network validation.

Splunk

  • : added info messages and documentation links to multiple uberAgent UXM Splunk dashboards in case required data is missing. Affected dashboards: Windows Performance Counters, Browser Web App Performance, Browser Web App Usage, Browser Performance: Internet Explorer, CVAD/DaaS Applications & Desktops, CVAD Databases, CVAD/DaaS Licensing, CVAD/DaaS Machines, NetScaler Appliance Performance, NetScaler Virtual Server Performance, NetScaler Gateway Performance, and NetScaler Inventory.
  • : enabled manual rebuilds for data models and reduced the acceleration backfill window to one day to lower search head resource consumption.

Installer

Windows

  • : improved cleanup of registry values and driver files during uninstallation.

Release notes

  • : new sourcetype uberAgent:Application:BrowserPerformance with fields: Browser, ProcUser, ProcType, CPUPercent, MemoryMB, TabUrl, TabUrlCount and UtilityType.
  • : removed sourcetype uberAgent:Application:BrowserPerformanceChrome.
  • : removed dashboards Browser Performance: Chrome and Browser Performance: Edge.
  • : renamed the Licensing navigation item to uberAgent in the uberAgent UXM Splunk app, and deprecated the uberAgent versions dashboard.
  • : removed support for deprecated Citrix Enterprise Browser
  • : memory-usage related metrics for ProcessDetail and BrowserPerformance now represent the physical memory footprint instead of the process' resident size. This allows for better comparability with other tools like the macOS Activity Monitor or Chrome's task manager.