Splunk Archives • Helge Klein

Identifying MS Teams Application Instances & Counting App Starts

Microsoft Teams is a web application that needs a browser as a runtime environment. In order to keep things simple – at the expense of disk space – the Teams installation package contains not only the actual web app but also all components that are needed to run it, including Chromium. When you launch Teams, […]

Splunk Search Results: JSON to HTML Table Conversion in PowerShell

Splunk search results can be exported from the UI as CSV, JSON, and XML, but not as HTML. This article presents a PowerShell script that converts exported search results from JSON into an HTML table for use with documentation, blogs, etc.

Why Sizing for Averages is a Bad Idea

All You (N)ever Wanted to Know about Logon & Group Policy Performance

Citrix Synergy, E2EVC and BriForum are just around the corner. I will be presenting at each of these conferences. Here are a few tidbits to whet your appetite.

What’s New in uberAgent 3.0

One of the (many) great things about Splunk is that data, once indexed, is not being tampered with. Of course, you can choose for how long you want to retain your data, but Splunk won’t go and average multiple older events into one, because that would flatten peaks and remove potentially important detail. This means […]

What’s New in uberAgent 2.1

In version 2.1 uberAgent collects detailed ICA, PCoIP, and RDP remoting client properties. Yes, that is right, we have added support for VMware Horizon View to our user experience and application performance monitoring product. Read on for more goodness!

What’s New in uberAgent 2.0

The most important change in version 2.0 of uberAgent is the new architecture. In addition to that we have made many other improvements, significantly reducing the agent’s footprint while increasing the quality of the collected data. Architecture Most Splunk apps that collect data on monitored endpoints are implemented as so-called Scripted or Modular Inputs. uberAgent […]

What Is Splunk and How Does It Work?

You have probably heard of Splunk, but can you describe what it does to a colleague in a few sentences? That is not easy. Splunk does not belong in any traditional category but stands apart from the crowd. That makes it interesting, but also the explaining harder. Here is my attempt.

Splunk App Development Tips – Working with Splunk

This is a collection of useful tips and resources for developing Splunk apps. For an explanation of the available app types please see my earlier article on the topic.

How to Send Data from C# to Splunk via the REST API

Splunk has a very extensive REST API – which is just a fancy way of saying that many of its capabilities are accessible via standard HTTP(S) requests. While much of the API is well documented, submitting data from C# to Splunk is kept a bit vague. Since I had to do that recently in order […]

Monitoring any Application’s Startup Duration with uberAgent 1.6

Application startup duration is an essential component of user experience. If you want to make sure that UX on your Windows machines is acceptable you need to monitor the time it takes for applications to start up. That, however, is not exactly easy – without uberAgent for Splunk.

uberAgent Now Monitors RES Workspace Manager Logon Times, Too

Whether user profiles are loading slowly or group policy processing is taking too long – uberAgent for Splunk tells you exactly what is causing slow logons. uberAgent always supported a broad range of platforms, from physical PCs through virtual desktops to Citrix XenApp. Today we add RES Workspace Manager to that list!

Application Usage Metering with uberAgent for Splunk

uberAgent has been pretty good at monitoring applications for some time. It is capable of auto-grouping processes to applications and showing IOPS and other stats per application in addition to per process. All this gets even better today: beta 2, available now, adds application usage metering to the feature list.

uberAgent for Splunk: User Experience

Who said that end users get all the pretty UIs? Administrators are as happy as anyone to replace ugly consoles with good-looking HTML5 that runs on a smartphone just as well as on a PC.

uberAgent for Splunk: Dynamic Application Identification

uberAgent for Splunk monitors Windows machines. It does not try to display as much data as possible but focuses on visualizing what is actually going on instead. In the last post we gave you a glimpse of the information it can display about user sessions and logon times. Today we are going to talk about […]

Introducing uberAgent for Splunk

uberAgent for Splunk takes Windows monitoring a step further. uberAgent does not just collect data – it gives you the information that matters. Other monitoring products rely on the performance counters built into Windows. uberAgent has its own metrics, covering key aspects of user experience and system performance.

Tag: Splunk

Identifying MS Teams Application Instances & Counting App Starts

Splunk Search Results: JSON to HTML Table Conversion in PowerShell

Why Sizing for Averages is a Bad Idea

All You (N)ever Wanted to Know about Logon & Group Policy Performance

What’s New in uberAgent 3.0

What’s New in uberAgent 2.1

What’s New in uberAgent 2.0

What Is Splunk and How Does It Work?

Splunk App Development Tips – Working with Splunk

How to Send Data from C# to Splunk via the REST API

Monitoring any Application’s Startup Duration with uberAgent 1.6

uberAgent Now Monitors RES Workspace Manager Logon Times, Too

Application Usage Metering with uberAgent for Splunk

uberAgent for Splunk: User Experience

uberAgent for Splunk: Dynamic Application Identification

Introducing uberAgent for Splunk