Infrastructure monitoring [Preview]
Citrix Monitor now offers visibility into the operational health of Citrix Virtual Apps and Desktops components. This feature helps you to easily identify, troubleshoot, and resolve issues related to your infrastructure. Currently, the health of the Citrix Provisioning (PVS) and StoreFront components are monitored.
To support this feature, a new Windows executable named Citrix Infra Monitor is introduced for Citrix components. This helps with the collection and transmission of relevant health metrics from PVS or StoreFront servers to Monitor.
This feature helps you to get critical monitoring data sets and proactive alerts regarding the PVS and StoreFront server’s system metrics on a single console in Monitor. Data is collected every five minutes from the monitoring components to ensure the latest information.
This feature aims to enhance operational efficiency by offering proactive monitoring, detailed metrics, and automated alerts, ensuring your Citrix infrastructure runs smoothly and efficiently.
Note:
Infrastructure monitoring will be available for Director in the upcoming on-premises release.
Key features
Real-time monitoring:
- Continuous monitoring of Citrix infrastructure components such as Citrix Provisioning (PVS) servers and StoreFront.
- Dashboard views presenting system health, resource utilization, and relevant performance metrics.
Detailed analysis:
- Provides detailed analysis on the system health metrics such as connectivity status, and service or process status for each component.
- Details on the resource utilization metrics such as CPU, memory, and disk utilization.
Automated alerts and notifications:
- Customizable alert thresholds for various metrics and states with granular scopes.
- Real-time notifications through email and webhooks.
Use-cases
Operational efficiency:
Ensures that Citrix admin teams can maintain high availability and performance of their Citrix servers and services. This feature also helps in minimizing downtime by proactively identifying and alerting admins on issues before they impact significant user groups.
Faster ticket resolution:
Monitors key metrics on server health and performance to evaluate the optimal delivery of virtual applications and desktops to users. Use these metrics to diagnose and resolve user complaints related to performance by analyzing associated components.
Prerequisites
- Configure HTTPS for Citrix Infra Monitor with Citrix Cloud. This prerequisite is optional but recommended. For more information, see Configure HTTPS for Citrix Infra Monitor.
- User accounts or permissions required to run Citrix Infra Monitor:
- User accounts with Windows administrator permissions to install the Citrix Infra Monitor on the endpoint machines.
-
A full administrator user account or a custom role with the following Monitor permissions:
- Create\Edit\Enable\Delete Alert Policies
- Create\Edit\Remove Alert Email Server Configuration
- Dismiss Alerts
- View Alert Policies
- View Alerts
- View Dashboard page
- View Infrastructure Monitor page
- To view the Alerts page
Note:
If you don’t have permission to access the Alerts page, the Manage Alerts option is disabled on the Infrastructure Monitoring page.
Getting started with Infrastructure Monitoring
Step 1: Installation of Citrix infra Monitor
Perform the following steps to complete the installation on the target component to establish connection for secure data collection.
Step 1.1: Identify the target components
Identify the target components such as PVS or StoreFront servers which need to be monitored.
Step 1.2 Download Citrix Infra Monitor
You can download CitrixInfraMonitor.msi
from the Citrix downloads page on the target server identified in Step 1.1.
Step 1.3: Run Citrix infra Monitor
Run the CitrixInfraMonitor.msi
installer on the target component by following the instructions in the installation wizard.
Note:
Users with administrative privileges can install and configure Citrix infra Monitor on the target component.
Once the installation is successful, you can view the Citrix Infra Monitor Service in the Services section:
Step 1.4: Get the registration token
Get the token provided in the RegistrationToken.txt
file at C:\ProgramData\Citrix\InfraMonitor\RegistrationToken.txt
in the system where Citrix Infra Monitor is installed and keep it ready for use in Step 3: Register Citrix Infra Monitor.
Note:
Once you successfully install
CitrixInfraMonitor.msi
, the installer creates an exception for the 9595 port. If you are using any third-party firewall, you might have to allow TCP communication for this port manually for using the Citrix Infra Monitoring service.
Step 2: Configure HTTPS for Citrix Infra Monitor
Note:
Citrix Infra Monitor service works in HTTP mode as well and in this case, the following configuration isn’t required. However, we recommend you to use in https mode. Perform the following steps only if you need to configure https for Citrix Infra Monitor.
Step 2.1: Upload the certificate to the machine
-
Get a PFX certificate for your machine where Citrix Infra Monitor is installed. For more information on PFX file generation, see How to create a PFX file.
Note:
You can use password protected PFX files also.
-
Upload the certificate to the machine to any location.
Step 2.2: Import the certificate to computer certificates
- Click Start > Run > type
mmc
, and then click OK. The Console 1 - [Console Root] window appears. -
On the File menu, click Add/Remove Snap-in. The Add or Remove Snap-ins window appears.
-
Under Snap-in, double-click Certificates. The Certificates snap-in window appears.
-
Select Computer account, and then click Next. The Select Computer window appears.
- Select Local computer.
- Click Finish. The Certificates (Local Computer) section appears on the list of selected snap-ins for the new console.
- Click OK.
-
Expand Certificates, right-click Personal > All Tasks > Import. The Welcome to the Certificate Import Wizard appears.
-
Select Next > Browse Files. Navigate to the location where you uploaded the PFX file, change the file type to All files and then select the respective PFX certificate.
- Enter the PFX Password. You can leave it blank if there is no password.
- Click Next.
-
For the Certificate Store, make sure that the Place all certificates in the following store option is selected and the Certificate store is selected as Personal.
- Click Next.
- Review the details and click Finish.
- Wait for confirmation. The The import was successful message appears.
- Navigate to Certificates > Personal and ensure that the certificate is present.
- Delete the PFX certificate file from the machine.
Step 2.3: Provide read access to certificate
- Right-click on the imported certificate > All Tasks > Manage Private Keys.
- In the dialog that opens, select Add, and then search for Network Service. Click OK.
- Select NETWORK SERVICE under Group or user names.
- Allow Read access under Permissions for NETWORK SERVICE.
- Click OK.
Step 2.4: Obtain the Thumbprint
- Double-click on the imported certificate.
- In the dialog that opens, navigate to the Details tab and scroll to the bottom.
-
Click Thumbprint.
- Copy the value and keep it ready for the next step.
Step 2.5: Setting the environment variable
- Open Control Panel.
- Search for environment and select Edit the system environment variables.
-
Under System Variables (for all users), click New.
- Specify the Variable name as DIRECTOR_AGENT_HTTPS_CERTIFICATE_THUMBPRINT.
- Specify the thumbprint from the previous step under Variable value.
- Click OK.
Step 2.6: Restart CitrixInfraMonitorService
-
Open PowerShell and run the following command:
Restart-Service CitrixInfraMonitorService <!--NeedCopy-->
-
Ensure that the HTTPS is enabled by capturing the CitrixInfraMonitorService module and looking for the log line Start to listen on HTTPS….
Step 2.7: Enable HTTPs in Monitor configuration
To enable HTTPs in Monitor service, contact Citrix Technical support and request to enable the DirectorAgentEnableHttps
setting under the Monitor configuration.
Step 3: Register Citrix Infra Monitor
Prerequisites:
-
Ensure that the Citrix Infra Monitor is installed on the StoreFront or PVS machine.
-
You need to first install the Remote PowerShell SDK on any domain-joined machine within the same resource location. For more information, see the SDK and API documentation.
Note:
The minimum required version of PoshSDK is 7.42.26154.48609 or later.
Perform the following steps and run the PowerShell commands on the device where you installed the Remote PowerShell SDK:
- Sign in to the Citrix Cloud console with your Citrix Cloud credentials.
- Navigate to Identity and Access Management.
-
Go to API access tab > Secure Clients > Name your Secure Client and click Create Client.
- Once you’ve created the client, the ID and secret can be downloaded in a CSV file for future use.
-
To set up the connection with the Citrix Cloud environment, use the Client Secret created in the preceding step. The example command to use in PowerShell is as follows:
Set-XDCredentials -CustomerId “<customerid>” -SecureClientFile “c:\temp\secureclient.csv” -ProfileType CloudAPI –StoreAs “default” <!--NeedCopy-->
-
List the PowerShell Citrix Cloud profiles stored in the computer locally using the following PowerShell commands:
Get-XDCredentials -ListProfiles <!--NeedCopy-->
The following image shows the preceding commands as entered in the PowerShell:
-
Run the following PowerShell command to register the Citrix Infra Monitor:
Add-MonitorDirectorAgent -Fqdn <FQDN of component> -Component <component> -AdminAddress localhost:19097 -ResourceLocationId <resourceLocationID> -Domain <domain> -Username <username> -Password <password> -Token <token> <!--NeedCopy-->
Note:
The user name and password are optional parameters. However, if you don’t provide these parameters, some of the metrics won’t be available for you.
The parameters of the preceding command are as follows:
Parameter | Description |
---|---|
Fqdn |
FQDN of the PVS or StoreFront server. |
Component |
The component that you’re onboarding. For example: PVS or SF. PVS stands for Citrix Provisioning and SF stands for StoreFront. |
ResourceLocationId |
The resource location ID of the site. To retrieve this value, select the ID button located beneath the resource location name on the Resource Locations page in Citrix Cloud. |
Domain |
The domain in which all components are a part of. |
Username |
User name of the admin user. |
Password |
Password of the admin user. |
Token |
Get the Citrix Infra Monitor token from the RegistrationToken.txt file at C:\ProgramData\Citrix\InfraMonitor\RegistrationToken.txt in the system where the Citrix Infra Monitor is installed. |
Note:
The token text present at the
RegistrationToken.txt
file is regenerated when you restart the Citrix Infra Monitor service. After the registration is successful, the token file is deleted from the machine. If you need to re-register, restart the Citrix Infra Monitor service.For security reasons, the token file is removed after three failed registration attempts with an invalid token.
Once you successfully register the PVS or StoreFront machine, the machine name details appear on the Monitor > Infrastructure tab.
A sample command to register for the Citrix Infra Monitor is as follows:
Deregister a component
In the event you need to deregister a given component, run the following PowerShell command on the device where PoshSDK is installed:
Remove-MonitorDirectorAgent -Fqdn <FQDN of component> -Component <component> -AdminAddress localhost:19097 -ResourceLocationId <resourceLocationID> -Domain <domain> -Username <username> -Password <password> -Token <token>
<!--NeedCopy-->
A sample command to remove registration of the Citrix Infra Monitor is as follows:
Note:
Deregistering a component only stops the data flow from the specific component to Monitor. If you need to uninstall Citrix Infra Monitor, uninstall it from the Control panel.
Infrastructure Dashboard
You can see the health values for your components in the Infrastructure Monitoring page. These results help to analyze and troubleshoot issues proactively regarding your infrastructure.
You can filter the Infrastructure Monitoring page by:
- Host name - Select the host name
- Reachability - Select Up (server is reachable) or Down (Server isn’t reachable) checkbox
- Errors - Select Show rows with errors only checkbox.
Use the Manage columns option to choose the data to be seen in your dashboard.
PVS health metrics
Click the Infrastructure tab and then select PVS. The Infrastructure dashboard for PVS appears:
The following details are monitored for PVS servers:
Category | Metrics | Description |
---|---|---|
Reachability
|
Host name | The name of the PVS machine where Citrix Infra Monitor is installed. This metric is a string value. |
PVS Site Name | The name of the PVS site. This metric is a string value. | |
PVS Farm Name | The name of the PVS farm. This metric is a string value. | |
PVS Site ID | Displays the site ID of the PVS server. This metric is a string value. | |
PVS Farm ID | Displays the farm ID of the PVS server. This metric is a string value. | |
Server Status | Shows the reachability state of the given server. Possible values are Up, Down, and Unknown. | |
Last Boot Time | Displays the time when the PVS server was last booted. | |
Last updated | Displays the time when the data was collected from the PVS server. | |
Dependent Services
|
Streaming Service | Displays the status of the streaming service. This metric shows the Windows services status. The possible values are: Not running, Running, Not Installed, and n/a (with help icon). |
SOAP Service | Displays the status of the Simple Object Access Protocol (SOAP) service. This metric shows the Windows services status. The possible values are: Not running, Running, Not Installed, and n/a (with help icon). | |
DB Connectivity | Displays the status of the database connectivity. If you are using a Citrix Provisioning server version 2402 or earlier, you might get an unknown error. The possible values are Not Connected, Connected, Unknown, and n/a (with help icon). | |
License Server Reachability | Displays whether the license server is reachable or not. If you’re using the Citrix Provisioning server version 2402 or earlier, you might get an unknown error. The possible values are Not Connected, Connected, Unknown, and n/a (with help icon). | |
Resource Utilization
|
CPU Usage % | Displays the usage of CPU in percentage using a line chart. The value displayed is the latest one at the end of the last 5 mins. |
Avg CPU % | Displays the average CPU percentage of the PVS server aggregated over the last 10 mins. | |
Peak CPU % | Displays the peak CPU percentage of the PVS server in the last 5 mins. | |
Memory Usage % | Displays the usage of memory in percentage using a stack chart. The value displayed is the latest one at the end of the last 5 mins. | |
Avg Memory % | Displays the average memory percentage of the PVS server aggregated over the last 10 mins. | |
Peak Memory % | Displays the peak memory percentage of the PVS server in the last 5 mins. | |
Disk IOPS | Displays the input and output value of the disk using a line chart. | |
Avg Disk IOPS % | Displays the average disk IOPS of the PVS server aggregated over the last 10 mins. | |
Peak Disk IOPS % | Displays the peak disk IOPS percentage of the PVS server in the last 10 mins. | |
Disk Latency (Ms) | Displays the latency value of the disk using a line chart. | |
Avg Disk Latency % | Displays the average disk latency of the PVS server aggregated over the last 10 mins. | |
Peak Disk Latency % | Displays the peak disk latency percentage of the PVS server in the last 5 mins. | |
Impact
|
Total Rejected Logins | Number of total failure logins divided by the number of total logins trials. |
Device Count Active | Displays the total number of active devices in the PVS server. This metric is an integer value. |
StoreFront health metrics
Click the Infrastructure tab and then select StoreFront. The Infrastructure dashboard for StoreFront appears:
The following details are monitored for StoreFront servers:
Category | Metrics | Description |
---|---|---|
Reachability
|
Host name | Displays the name of the StoreFront server. This metric is a string value. |
Server Status | Displays the status of the StoreFront server. This metric shows the Windows services status. The possible values are: Not running, Running, Not Installed, and n/a (with help icon). | |
Base URL Status | Displays the health of the base URL. If the HTTP status code is 200, the status is UP. Else, the value is Down. | |
Last Boot Time | Displays the time when the StoreFront server was last booted. | |
Last updated | Displays the time when the data was collected from the StoreFront server. | |
Dependent Services
|
Domain Service | Health of windows service named as domain service. This metric shows the Windows services status. The possible values are: Not running, Running, Not Installed, and n/a (with help icon). |
Credential Wallet Service | This service is a windows service that is used for storing encrypted passwords. The possible values are: Not running, Running, Not Installed, and n/a (with help icon). | |
Peer Resolution Service | This service is a windows service which is responsible for inter-server group network communication forming a peer mesh of StoreFront servers. The possible values are: Not running, Running, Not Installed, and n/a (with help icon). | |
WWW Service | This metric is the web service of the StoreFront server. This metric shows the Windows services status. The possible values are: Not running, Running, Not Installed, and n/a (with help icon). | |
Resource Utilization
|
CPU Usage % | Displays the usage of CPU in percentage using a line chart. The value displayed is the latest one at the end of the last five mins. |
Avg CPU % | Displays the average CPU percentage of the StoreFront server aggregated over the last 10 mins. | |
Peak CPU % | Displays the peak CPU percentage of the StoreFront server in the last five mins. This value helps to decide on the maximum required capacity for a CPU. | |
Memory Usage % | Displays the usage of memory in percentage using a stack chart. The value displayed is the latest one at the end of the last 5 mins. | |
Avg Memory % | Displays the average memory percentage of the StoreFront server aggregated over the last 10 mins. | |
Peak Memory % | Displays the peak memory percentage of the StoreFront server in the last 5 mins. | |
Disk IOPS | Displays the input and output value of the disk using a line chart. | |
Avg Disk IOPS % | Displays the average disk IOPS of the StoreFront server using a float. | |
Peak Disk IOPS % | Displays the peak disk IOPS percentage of the StoreFront server aggregated over the last 10 mins. | |
Disk Latency (Ms) | Displays the latency value of the disk using a line chart. | |
Avg Disk Latency % | Displays the average disk latency of the StoreFront server aggregated over the last 10 mins. | |
Peak Disk Latency % | Displays the peak disk latency percentage of the StoreFront server in the last five mins. | |
Impact
|
ICA Certificate Validity | Displays the validity of the ICA certificate. The possible values are Expired, Expiring, Valid, and Not Found. |
ICA Certificate Chain Validity | Displays StoreFront ICA Certificate Chain is valid or not. The possible value is Yes or No. | |
IIS Certificate Validity | Displays the validity of the IIS certificate. The possible values are Expired, Expiring, Valid, and Not Found. | |
IIS Certificate Chain Validity | Displays StoreFront IIS Certificate Chain is valid or not. The possible value is Yes or No. |
Create and manage alerts
You can set up alerts for proactively monitoring conditions and scopes of interest to you and reduce alert fatigue. Alerts can be configured with severity, re-alert intervals, notification mediums, and follow the alert lifecycle supported in the product.
For more information, see the Alerts page.