by: Helge, published: Jan 17, 2013, updated: Jan 28, 2017, in

Introducing uberAgent for Splunk

uberAgent for Splunk takes Windows monitoring a step further. uberAgent does not just collect data – it gives you the information that matters. Other monitoring products rely on the performance counters built into Windows. uberAgent has its own metrics, covering key aspects of user experience and system performance.

Take logons: users are always complaining that logging on takes too much time. uberAgent not only tells you the exact duration of each single logon, it also shows you what is causing it: domain controller lookup, folder redirection group policy processing, logon script execution, to name a few.

Take performance: you keep buying servers and want to know where all that performance goes? Task Manager listing hundreds of processes does not help? uberAgent automatically groups processes to applications and gives you key indicators like IOPS or memory usage per application. Or per session. And if you absolutely insist: also per process.

All this data is not buried in a closed system, quite the contrary. As an add-on to Splunk, uberAgent gets to use all the capabilities of that great platform. And you get that, too: modifying or extending uberAgent is a snap with Splunk’s intuitive UI.

These first screenshots demonstrate what uberAgent is capable of in the area of user sessions. Whether it is logon times or IOPS per session, uberAgent has got you covered.

Screenshots of uberAgent’s application, machine and process dashboards are available in another article. If you like what you are seeing, register for the upcoming beta by sending e-mail to helge at

More information will be published soon in this blog and on uberAgent’s website.

Previous Article How to Determine the Size of the System Volume Information Directory
Next Article Windows Update Error 80072EFE in Client Hyper-V Guest