The topic of exporting Audit Logs for the Dex platform arose in Slack, and several members provided possible solutions using ControlUp APIs and workflows. The API article can be found at https://api.controlup.io/reference/orgauditlogpubliccontroller_getall and events overview can be found at https://support.controlup.com/docs/incidents-and-events-overview?highlight=Vdi%20event. The user was looking to export the logs to a different location, specifically Azure Sentinel.
Read the entire article here...
Logs Related Training & Support Archives
Logs training and support-related archives from inside the ControlUp Community on Slack.
Troubleshooting Citrix VDI Sessions with FSLogix and the ControlUp ALD Script
A team member asked about the ALD script on Citrix VDI sessions with FSLogix - it doesn't list individual AppX packages, but a warning says that package load times may not show for subsequent logins. Suggestions were given, including a ControlUp blog post on FSLogix optimization and checking specific Event Viewer channels to ensure logs are enabled and have enough space. A team member was also mentioned as being able to help with this issue.
Read the entire article here...
Read the entire article here...
Troubleshooting Black Screen Issues on Omnissa Horizon
Users on Omnissa Horizon are experiencing black screen issues when reconnecting to a session. The issue occurs 4-5 times a day and the only workaround is to force a logoff, leading to lost work. The setup and environment are described in detail, along with past troubleshooting attempts. A fellow ControlUp member suggests looking at Horizon Agent logs and utilizing Horizon's API to lock a VM for further investigation.
Read the entire article here...
Read the entire article here...
Using Variables in ControlUp Notification Creation
A discussion took place regarding the use of variables in notification creation based on the Citrix Connection Failures Advanced trigger. It was suggested to test a trigger with the Citrix Connection record type to see if the variables resolve. It was also mentioned that a ticket may need to be opened to gather logs for further investigation.
Read the entire article here...
Read the entire article here...
Tips for Building Conditions without False Alerts
A member asked about conditions in their environment and how to prevent false alerts from being created. They mentioned using Datadog to log incidents.
Read the entire article here...
Read the entire article here...
Retention Period for Audit Log in DEX Console at ControlUp
A user asked about the retention period for the audit log in the DEX console. Another user noted that it may depend on the license tier, but the support article states a retention period of 1 year. Another user shared their experience of having 10,000 records dating back to last August. The conversation shifts to discussing the potential challenges of a limited retention period. The topic of documentation is also mentioned. It is suggested to update the documentation to include information about the retention period.
Read the entire article here...
Read the entire article here...
Device Management and Access Control in ControlUp
A user asked about setting values for devices other than Groups and Tags. Another user suggested adding a Note to the device and using the Notes column to filter. A third user mentioned using Tags and Groups to manage devices and mentioned creating a new Role for a specific team and using RBAC settings to limit their access.
Read the entire article here...
Read the entire article here...
Event Severity Issues in ControlUp DEX Console
A user created triggers for "Black Hole Machines" and "Registration Failures" but noticed the event severity was only showing as Informational in the DEX Console. They asked for assistance in changing the severity and shared a screenshot. However, it was confirmed that the severity cannot be changed at this time but may be considered in the future. The user wanted to use this value for reporting dashboards and trends. Support was following up on the issue and confirmed that the severity cannot be changed and all triggers will still create an event, regardless of the register event action configured. The trigger was originally set up to send a webhook to Google Chat, but this was changed to a PowerShell script triggered through Script Action to create ServiceNow incidents in the future. There is no way to define the severity of the event at this time.
Read the entire article here...
Read the entire article here...
Using Event Alerts to Monitor Registry Key Values with ControlUp
A user asked about using event alerts to monitor a specific registry key value. They were given a solution by another member to run a PowerShell script and write the result to ControlUp's System Events log using the SIP EVENT pattern. This can be done by importing a sample script to write values to a custom data index. Further assistance can be reached out to the Account team.
Read the entire article here...
Read the entire article here...
Troubleshooting High Logon Durations on Citrix Images
A user asked for troubleshooting tips regarding high logon durations on a new MCS Citrix image. Other members suggested using the analyzer and running Promon as the user logs on to isolate the issue. A reference to a helpful discussion was also provided.
Read the entire article here...
Read the entire article here...