We recently installed Splunk app for Citrix, but only windows: security sourcetypes are generating events , citrix related events are not receiving any logging events. I am posting the inputs.conf file . I would appreciate if somebody can point out what i am doing wrong:
Is your PowerShell ExecutionPolicy set to RemoteSigned?
Do you see errors in splunkd.log on your Universal Forwarder?