I installed the TA to my XenApp server via deployment server and it errors everytime. PS scripts are set to remotesigned. I can run the ps script and I get data in Splunk format.
Splunk Forwarder 4.3.5 x64 running as local system on 2008 R2.
Get-XAFarm : Error reading the current administrator data (0x80130008)
Any ideas?
07-24-2013 12:17:52.547 -0700 ERROR ExecProcessor - message from "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -command " &'C:\Program Files\SplunkUniversalForwarder\etc\apps\TA-XA60-Server\bin\powershell\GetXASessionProcess60.ps1'" -index xenapp" Get-XAFarm : Error reading the current administrator data (0x80130008)
07-24-2013 12:17:52.547 -0700 ERROR ExecProcessor - message from "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -command " &'C:\Program Files\SplunkUniversalForwarder\etc\apps\TA-XA60-Server\bin\powershell\GetXASessionProcess60.ps1'" -index xenapp" At C:\Program Files\SplunkUniversalForwarder\etc\apps\TA-XA60-Server\bin\powers
07-24-2013 12:17:52.547 -0700 ERROR ExecProcessor - message from "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -command " &'C:\Program Files\SplunkUniversalForwarder\etc\apps\TA-XA60-Server\bin\powershell\GetXASessionProcess60.ps1'" -index xenapp" hell\GetXASessionProcess60.ps1:8 char:23
07-24-2013 12:17:52.547 -0700 ERROR ExecProcessor - message from "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -command " &'C:\Program Files\SplunkUniversalForwarder\etc\apps\TA-XA60-Server\bin\powershell\GetXASessionProcess60.ps1'" -index xenapp" + $FarmName = Get-XAFarm <<<< | select -ExpandProperty FarmName
07-24-2013 12:17:52.547 -0700 ERROR ExecProcessor - message from "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -command " &'C:\Program Files\SplunkUniversalForwarder\etc\apps\TA-XA60-Server\bin\powershell\GetXASessionProcess60.ps1'" -index xenapp" + CategoryInfo : InvalidResult: (:) [Get-XAFarm], CitrixException
07-24-2013 12:17:52.547 -0700 ERROR ExecProcessor - message from "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -command " &'C:\Program Files\SplunkUniversalForwarder\etc\apps\TA-XA60-Server\bin\powershell\GetXASessionProcess60.ps1'" -index xenapp" + FullyQualifiedErrorId : GetCitrixAdminType,Citrix.XenApp.Commands.GetFar
07-24-2013 12:17:52.547 -0700 ERROR ExecProcessor - message from "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -command " &'C:\Program Files\SplunkUniversalForwarder\etc\apps\TA-XA60-Server\bin\powershell\GetXASessionProcess60.ps1'" -index xenapp" mCmdlet
07-24-2013 12:17:52.547 -0700 ERROR ExecProcessor - message from "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -command " &'C:\Program Files\SplunkUniversalForwarder\etc\apps\TA-XA60-Server\bin\powershell\GetXASessionProcess60.ps1'" -index xenapp"
07-24-2013 12:17:53.072 -0700 INFO ExecProcessor - Ran script: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -command " &'C:\Program Files\SplunkUniversalForwarder\etc\apps\TA-XA60-Server\bin\powershell\GetXASessionProcess60.ps1'" -index xenapp, took 1532.2 milliseconds to run, 22228 bytes read
I resolved the problem by configuring the Splunk Forwarder App to run as a domain user account and giving that user local admin permissions in windows and citrix readonly permissions via citrix console.
I resolved the problem by configuring the Splunk Forwarder App to run as a domain user account and giving that user local admin permissions in windows and citrix readonly permissions via citrix console.
Tried installing Citrix SDK and still didnt help.