Report Counters Glossary

This glossary provides definitions of the counters and other data fields shown in EdgeSight reports. Some fields, such as Name, are self-explanatory and are not included in this glossary. For the definition of the metrics included in archive reports, see the tables in Accessible Citrix SQL Views and Accessible EdgeSight SQL Views as listed in Archive Reports.

In some cases, the XenApp server, plug-in (ICA client), and EdgeSight Agent versions running on a monitored device affect which counters are collected. See Session Experience Monitoring Metrics in the Working with Reports topic for more information. End user experience monitoring (EUEM) metrics collected by the session experience monitoring service are indicated by a label of "EUEM" at the end of the metric description.

Use the letters below to go directly to a section of the glossary. Note that terms are listed as they are shown in report headers. In some cases symbols (as in % User Time) or abbreviations (as in Avg CPU) are used due to space considerations.

Important: To find out what reports use a specific metric, in EdgeSight 5.0, click the Browse tab and type the name of the metric in the Search box in the user interace (not the Find (CTRL + F) feature in the Web browser). You can also find reports by entering a report name or description in the Search box.

A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

Historical Report Counters and Data Fields

A

Active Time

Active time is the actual amount of time that the user has the application as the active window on their desktop. The active window is the window that has focus on the desktop. Citrix EdgeSight Agents track application usage to calculate how long an application is actively used and how long it is run, and to collect usage counts for license tracking.

Address

The IPv4 or IPv6 address for a site.

AECD

Application Enumeration Client Duration. The time (ms) it takes to get the list of applications. (EUEM)

Alert Count

The number of alerts received by the EdgeSight Server during the specified time frame.

Alert Name

The specific name of the alert rule associated with the condition.

Alert Type

The type of alert condition, such as reboot, process fault, or system performance. The same type of alert can be triggered based on different rules, depending on the specific condition triggering the alert. For example, an alert with a type of system performance can be triggered based on a system slowdown, system low resources, or system thrashing alert rule.

Alerts

The number of alerts of a specific type received by the EdgeSight Server for a specified time period.

Alerts Today

The number of alerts received by the server for the current day.

Asset

Hardware and software asset report data is derived from Windows Management Instrumentation (WMI). For more information on WMI classes, see the WMI Reference at:

http://msdn.microsoft.com/en-us/library/aa394572.aspx

Asset Changes

The number of changes to device hardware and software assets during a specified time period.

Audio Input (bps)

The bandwidth, measured in bps, used when playing sound in an ICA session.

Audio Output (bps)

The bandwidth, measured in bps, used for playing sound in an ICA session.

Average Active

The average number of active sessions during a specified time period.

Average Inactive

The average number of inactive sessions during a specified time period.

Average Sessions/Device

The average number of sessions (active and inactive) for a device over a specified time period.

Avg Active Time

The average active time for an application. See Active Time.

Avg Alerts/hour

The average number of alerts per hour for the selected time period.

Avg Client Startup Duration (ms) or Avg CSD

The average time elapsed from the time of the request (mouse click) to the time when the ICA connection between the client device and Presentation Server has been established. In the case of a shared session, this duration will normally be much smaller, as many of the setup costs associated with the creation of a new connection to the server are not incurred.

Avg CPU or Avg CPU (%)

The average percent CPU usage over the specified time period. See CPU(%) for information on calculating CPU usage on multiprocessor machines.

Avg Delay (ms)

See Network Delay (ms).

Avg Free Mem (%)

The average percentage of free memory on a device or group of devices for a specified time period.

Avg ICA RTT (ms)

The average ICA round trip time over the specified time period. The ICA round trip is the time interval measured at the client between the first step (user action) and the last step (graphical response is displayed ), as calculated by the session experience monitoring service. The ICA round trip metric can be best thought of as a measurement of the "screen lag" that a user experiences while interacting with an application hosted in a session on a Presentation Server.

Avg Input (KB/sec)

A measure of ICA client traffic from an ICA Client to a Presentation Server.

Avg Input Bandwidth Used (Kbps)

The average input bandwidth used over the specified time period, expressed as kilobits per second. Input bandwidth used is the actual bandwidth consumed on the network (ICA Client to Presentation Server). (EUEM)

Avg Latency (ms)

The average ICA session latency in milliseconds. ICA session latency is based on the last recorded latency measured for the session (Latency - Last Recorded). The samples recorded by the agent are consolidated to one hour intervals in the data uploaded to the server.

Avg Login Time (sec)

Login time is the time between the start of a session and the end of the last process created as part of the login operation for that session.

Avg Memory Usage (%)

The average percentage of total memory used over the specified time period. See Memory Usage %.

Avg MP Duration (ms)

The average time, in milliseconds, taken to execute a monitoring point. Monitoring points are created using EdgeSight Active Application Monitoring, and can be a single instruction or a folder containing multiple instructions that measure application availability or response time.

Avg Network RTT (ms)

The average network round trip time (RTT) is based on network latency. Network latency is the detected network latency between the ICA client device and the Citrix Presentation Server. Unlike the ICA round trip metric, the network round trip is largely independent of processing time on the client or server.

Avg Output (KB/sec)

A measure of ICA client traffic from a Presentation Server to an ICA Client.

Avg Output Bandwidth Used (Kbps)

The average output bandwidth used over the specified time period, expressed as kilobits per second. Output bandwidth used is the actual bandwidth consumed on the network (Presentation Server to ICA Client). (EUEM)

Avg Page Faults/sec

The average number of page faults per second for In capturing page faults, both hard and soft page faults are counted (with hard page faults, data must be read from disk; with soft page faults, data is found in physical memory but must be rearranged). Page faults can occur if the virtual memory system becomes unstable due to a shortage of physical memory (RAM) or a shortage of free disk space.

Avg Pages Per Second

The average pages per second read from or written to disk over the specified time period. See Pages per Second.

Avg Process Count

The average number of processes running on a device for a specified time period.

Avg RTT (ms)

The average round trip time. Round trip time (RTT) is a measure of network response. Citrix EdgeSight Agents measures the round-trip time passively during a network connection creation. Whenever a TCP/IP socket connection is made, the agent records the RTT for that socket connection to the server. RTT can sometimes be measured to be zero.

Avg Running Time

The average running time for an application over the specified time period. See Running Time.

Avg Server Startup Duration (ms) or Avg SSD

The average time spent on the Presentation Server performing the entire start-up operation. In the event of an application starting in a shared session, this metric is expected to be much smaller, as starting a completely new session involves potentially high cost tasks such as profile loading and login script execution.

Avg Test Duration (ms)

The average time, in milliseconds, taken to execute a test. Tests are created using EdgeSight Active Application Monitoring and can include one or more scripts that measure application availability or response time.

Avg Thread Count

The average thread count over the specified time period. See Thread Count.

Avg Total Active Sessions

The average number of total active sessions for a group of devices over a specified time period.

Avg Total Inactive Sessions

The average number of total inactive sessions for a group of devices over a specified time period.

Avg Total Sessions

The average number of total sessions for a group of devices over a specified time period.

Back to top

B

BUCC

Backup URL Client Count. The number of backup URL retries before success. Note that this is the only client start-up metric that is a count of attempts, rather than a duration. (EUEM)

C

Capacity (GB)

The total disk capacity in gigabytes (GB) for a device. This is used in calculating the percentage of free disk space.

CASD

Credentials Authentication Server Duration. The time (ms) spent on the server authenticating the user credentials. (EUEM)

Category

A classification for applications or processes based on their type or function, such as email programs or spyware programs.

CFDCD

Configuration File Download Client Duration. The time (ms) it takes to get the configuration file from the XML server. (EUEM)

Client Address

The IP address of a device connecting to a Presentation Server.

Client Delay (ms)

To calculate client delay (ClientPercent), we first calculate the amount of time between successive reads of data coming from the server. This is the amount of time taken by the client to read and process the buffers that make up a server response.

Client Name

The name of a device connecting to a Presentation Server.

Client Time

In alert reports, the time that an alert condition occurred on the device running an EdgeSight Agent (not to be confused with a client device connecting to a Presentation Server). If the device where the alert condition occurred and the server are in different time zones, the time is converted to the time zone of the server.

Client Type

The type of client connecting to a Presentation Server, such as ICA Win32 or RDP.

Client Version

The version of the executable file for a client connecting to a Presentation Server. This data may not be displayed for all client types. For example, a version is displayed for ICA Win32 clients, but not for RDP clients.

COCD

Credentials Obtention Client Duration. The time (ms) it takes to get the user credentials. Note that COCD is only measured when credentials are entered manually by the user. (EUEM)

Connections

The number of connections made to a Presentation Server by a type of client for the specified time period.

CONSD

Credentials Obtention Network Server Duration. The time (ms) spent by the server performing network operations to obtain credentials for the user. This only applies to an SSPI login (a form of pass-through authentication where the client device is a member of the same domain as the server and Kerberos tickets are passed in place of manually entered credentials). (EUEM)

Console

The number of sessions using the console connection.

Context Switches / sec

Context Switches/sec is the combined rate at which all processors on the computer are switched from one thread to another. Context switches occur when a running thread voluntarily relinquishes the processor, is preempted by a higher priority ready thread, or switches between user-mode and privileged (kernel) mode to use an Executive or subsystem service. It is the sum of Thread
Context Switches/sec for all threads running on all processors in the computer and is measured in numbers of switches. There are context switch counters on the System and Thread objects. This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval.

COSD

Credentials Obtention Server Duration. The time (ms) taken for the server to obtain the user credentials. This is only likely to be a significant amount of time if manual login is being used and the server-side credentials dialog is displayed (or if a legal notice is displayed before login commences). (EUEM)

CPU (%)

The average percent CPU usage over the specified time period. If a machine has more than one processor, the counter value for each processor is totaled, and the resulting value is divided by the number of processors. A separate value is not attributed to a specific processor. The same calculation method is used for hyperthreaded processors. For example, if a machine has dual, hyperthreaded processors, the total metric is divided by four.

CPU Time

The cumulative CPU usage time over the specified time period.

CPU Utilization Management

Indicates whether the CPU Utilization Management feature is enabled or disabled. This is a feature of Presentation Server 4.0 designed to give each user a fair share of the CPU by modifying the normal job priority scheduling in the operating system. CPU time will be allocated fairly across all users on the server. It normalizes the CPU usage of each user by smoothing out the normal CPU peaks that most applications have. It will limit very CPU-intensive applications to a fair-share of the CPU, so that one user does not inadvertently have an inappropriate adverse affect on the other users. This enables administrators to easily calculate how many users can fit on a machine at once and hence how many machines must be purchased.

Current Service State

The current state of the IMA service: Machine Boot, Service Started, Service Stopped, Service Stopped Unexpectedly, Machine Shutdown, Machine Shutdown Unexpectedly, or Unknown state.

Back to top

D

Date

The date on which the associated data was collected. Note that dates and times in historical reports are expressed relative to the time zone of the EdgeSight server.

Device

A system hosting an EdgeSight agent. This can be a Presentation Server of an endpoint system.

DMSD

Drive Mapping Server Duration. The time (ms) spent on the server mapping the users' client drives, devices, and ports. (EUEM)

Drive Input (bps)

The bandwidth, measured in bps, used when performing file operations between the client and server drives during an ICA session.

Drive Output (bps)

The bandwidth, measured in bps, used when performing file operations between the client and server drives during an ICA session.

Duration - session

The total elapsed time for a session.

Duration (ms)

In the Application Response Time for a Test report, the total elapsed time to execute an EdgeSight Active Application Monitoring test.

Back to top

E

End Time

The time that a user's Presentation Server session was terminated.

Errors - process

The number of errors detected for a process. This can be reported relative to a process, a device, or a user. EdgeSight determines a message box to be a notification of a process error if the message box contains an error icon or the text of the message box contains one or more of the following error keywords: error, unable, fail*, unsuccessful, unexpected, bad, fault, invalid, illegal, denied, not valid, exception, or memory. Process errors fall into the following categories:

• File---Problems such as an invalid file or folder name, or a media error.
• Login & Authorization---Problems such as a logon failure due to an invalid username or password.
• Security---Problems such as a failure to access files or services due to not having been granted the required permissions or not having been assigned the required role.
• Printer---Problems such as a failure to access a printer or queue a file for printing.
• Data---Problems such as a failure to read or write data due to syntax, connectivity, or resource issues.
• Database---Problems such as an error when selecting, inserting, or updating data due to syntax or database connectivity issues.
• Connecting & Downloading---Problems such as the loss of a network connection or a download failure due to resource or network constraints.
• Uncategorized---Problems that can not be categorized based on keywords contained in the error message.

Errors - Web

The number of Web errors detected. Web errors include both transaction errors and Winsock errors.

Event ID

An event number used to identify the specific event.

Event Type

The classification of the event by the operating system, such as Error, Warning, information, Success Audit, or Failure Audit.

Back to top

F

Faults

The number of faults (crashes) detected for a process. This can be reported relative to a process, a device, or a user. You can view crash reports and dump files (Crash Details, XML Report, Mini Dump, or Crash CAB), if available. When displaying process faults in a report, click the information icon to display fault report details. Note that in some cases, crash conditions prevent the collection of data.

Filename

The name of the executable file for a process.

First Seen - process or site

The date on which the process or site was first detected by an EdgeSight Agent. To avoid over reporting new processes, there is a lag time of several days after EdgeSight Server and Agents are installed before processes are reported as new. This allows baseline data to be established for applications already installed on managed systems. This ensures that the information displayed reflects applications that are truly new to your enterprise.

Free Space (GB)

The amount of free space on a disk in gigabytes.

Back to top

H

Highest Memory Usage (%)

The highest percentage of memory used on a device during the specified time period.

Host

A system hosting a Web site. In some cases, host and site are used interchangeably.

Back to top

I

ICA (Independent Computing Architecture)

The architecture that Presentation Server uses to separate an application's logic from its user interface. With ICA, only the keystrokes, mouse clicks, and screen updates pass between the client and server on the network, while 100% of the application's logic executes on the server.

ICA Session Compression Input (%)

The compression ratio used from client to server for a session.

ICA Session Compression Output (%)

The compression ratio used from server to client for a session.

ICA Session Line Input (bps)

The line speed, measured in bps, used from client to server for a session.

ICA Session Line Output (bps)

The line speed, measured in bps, used from server to client for a session.

IFDCD

ICA File Download Duration. The time (ms) it takes the client to download the ICA file from the web server for Program Neighborhood Agent or Web Interface. (EUEM)

IMA (Independent Management Architecture)

A server-to-server infrastructure that provides robust, secure, and scalable tools for managing any size server farm. Among other features, IMA enables centralized platform-independent management, an ODBC-compliant data store, and management products that plug into a management console.

Interrupts/sec

Interrupts per second is the average rate, in incidents per second, at which the processor received and serviced hardware interrupts. It does not include deferred procedure calls (DPCs), which are counted separately. This value is an indirect indicator of the activity of devices that generate interrupts, such as the system clock, the mouse, disk drivers, data communication lines, network interface cards, and other peripheral devices. These devices normally interrupt the processor when they have completed a task or require attention. Normal thread execution is suspended. The system clock typically interrupts the processor every 10 milliseconds, creating a background of interrupt activity. This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval.

Back to top

L

Last Alert

The date and time that the most recent alert was received by the server.

Last Change

The date and time that the last asset change (addition, property change, or removal) occurred on a device.

Last Visited - sites

The date and time that a Web site was last accessed by a user.

Launcher

The name of the EdgeSight Active Application Monitoring launcher from which tests were run.

Login Time (sec) {LoginTime]

Login time is the time between the start of a session and the end of the last process created as part of the login operation for that session. The login time metric is computed on the Presentation Server machine where the agent is running.

Logins

The number of separate Presentation Server logins by a user over a specified time period.

LPWD

Launch Page Web Server Duration. The time (ms) it takes to process the launch page (launch.aspx) on the Web Interface server. (EUEM)

LSESD

Login Script Execution Server Duration. The time (ms) spent on the server running the users' login script(s). (EUEM)

Back to top

M

Manufacturer

The company which made a hardware asset which was the source of an alert condition. This is analogous to vendor for software assets.

Max Queue Length

The maximum thread queue length for the specified time period. Thread queue length indicates how long a particular thread is waiting for instructions to be performed. A high thread queue length may be caused by an underpowered machine.

Max ICA RTT (ms)

The greatest single ICA round trip time during the specified time period. The ICA round trip is the time interval measured at the client between the first step (user action) and the last step (graphical response is displayed ), as calculated by the session experience monitoring service. The ICA round trip metric can be best thought of as a measurement of the "screen lag" that a user experiences while interacting with an application hosted in a session on a Presentation Server. (EUEM)

Max MP Duration (ms)

The maximum time, in milliseconds, taken to execute a monitoring point. Monitoring points are created using EdgeSight Active Application Monitoring, and can be a single instruction or a folder containing multiple instructions that measure application availability or response time.

Max Network RTT (ms)

The maximum network round trip time (RTT) is based on network latency. Network latency is the detected network latency between the ICA client device and the Citrix Presentation Server. Unlike the ICA round trip metric, the Network round trip is largely independent of processing time on the client or server. (EUEM)

Max Queue Length

The greatest number of threads in the queue during the specified time period. Thread queue length indicates how long a particular thread is waiting for instructions to be performed. A high thread queue length may be caused by an underpowered machine.

Max RTT (ms)

The maximum round trip time in milliseconds. Round trip time (RTT) is a measure of network response. Citrix EdgeSight Agents measures the round-trip time passively during a network connection creation. Whenever a TCP/IP socket connection is made, the agent records the RTT for that socket connection to the server. RTT can sometimes be measured to be zero.

Max Test Duration (ms)

The maximum time, in milliseconds, taken to execute a test. Tests are created using EdgeSight Active Application Monitoring and can include one or more scripts that measure application availability or response time.

Memory Usage (%)

% Committed Bytes, which is the ratio of Memory
Committed Bytes to the Memory
Commit Limit. Committed memory is the physical memory in use for which space has been reserved in the paging file should it need to be written to disk. The commit limit is determined by the size of the paging file. If the paging file is enlarged, the commit limit increases, and the ratio is reduced. This counter displays the current percentage value only; it is not an average.

The percent of committed bytes is used as the metric for monitoring memory usage because it most accurately reflects the system-wide memory consumption on the machine.

As memory usage increases, so does the % Committed Bytes value. If a static memory consumption value, like Committed Bytes, was used, it would not be possible to determine the memory load on the machine as well as the total available memory. % Committed Bytes takes both used and available memory into account.

The metric is also valuable for device comparison purposes. A percentage is normalized from one machine to the next but a static memory consumption value is not. For example:

Machine A
---------

Committed Bytes: 746MB
Commit Limit: 2461MB
% Committed Bytes: 30.3%

Machine B
---------

Committed Bytes: 587MB
Commit Limit: 843MB
% Committed Bytes: 69.6%

It is possible to tell from % Committed Bytes alone that Machine B has a high memory load and Machine A does not. However, by looking at Committed Bytes, it is only possible to tell is that Machine A is using more memory than Machine B. There is no insight into the load on the machine.

Min MP Duration (ms)

The minimum time, in milliseconds, taken to execute a monitoring point. Monitoring points are created using EdgeSight Active Application Monitoring, and can be a single instruction or a folder containing multiple instructions that measure application availability or response time.

Min Test Duration (ms)

The minimum time, in milliseconds, taken to execute a test. Tests are created using EdgeSight Active Application Monitoring and can include one or more scripts that measure application availability or response time.

Monitoring Point

An instruction or group of instructions within an EdgeSight Active Application Monitoring script which is used to measure application availability or response time.

MP's Failed

The number of monitoring points which failed during the time period selected. Monitoring points are created using EdgeSight Active Application Monitoring, and can be a single instruction or a folder containing multiple instructions that measure application availability or response time.

MP's Passed

The number of monitoring points which passed during the time period selected. Monitoring points are created using EdgeSight Active Application Monitoring, and can be a single instruction or a folder containing multiple instructions that measure application availability or response time.

Back to top

N

Network Delay (ms)

Network delay is the network round-trip time plus the time it takes the server to respond to the transaction request. Network delay is measured passively on the client by monitoring the sends and receives between a client and a server.

On the initial connection of a socket, the round-trip time (RTT) to the first level server for that connection is recorded. Then, on a sampled basis (or when the socket is closed), the number of round trips (NumRoundTrips) is estimated based on the amount of sent and received data for the socket. The delay for the current transaction (TransDelay) is also recorded. A transaction is defined as a request followed by a response. The delay is detected at the Winsock level.

In order to maintain the efficiency of the Citrix EdgeSight Agent, network delay is ignored when very small network payloads occur. This is consistent with the goal of providing an accurate assessment of end-user network performance.

NRCD

Name Resolution Client Duration. The time (ms) it takes the XML service to resolve the name of a published application to an IP Address. This metric is only collected for new sessions, and only if the ICA file does not specify a connection to a Presentation Server with the IP address already provided. (EUEM)

NRWD

Name Resolution Web Server Duration. The time (ms) it takes the XML service to resolve the name of a published application to a presentation server address. This metric is collected when the application is launched via the Program Neighborhood Agent or Web Interface. (EUEM)

Back to top

P

Pages per Second

Pages per second. Pages/sec is the rate at which pages are read from or written to disk to resolve hard page faults. This counter is a primary indicator of the kinds of faults that cause system-wide delays. It is the sum of Memory
Pages Input/sec and Memory
Pages Output/sec. It is counted in numbers of pages, so it can be compared to other counts of pages, such as Memory
Page Faults/sec, without conversion. It includes pages retrieved to satisfy faults in the file system cache (usually requested by applications) non-cached mapped memory files.

PCSD

Printer Creation Server Duration. The time (ms) spent on the server synchronously mapping the users' client printers. If the configuration is set such that this printer creation is performed asynchronously, then no value is recorded as it does not affect the completion of the session startup. (EUEM)

Peak Concurrent or Peak Concurrent Sessions

The most sessions (active and inactive) at any given time during the specified time period.

Peak CPU (%)

The highest percentage of CPU used by a device during the specified time period.
See CPU(%).

Peak CPU % User

The user associated with the session accounting for the peak CPU usage, as displayed in Peak CPU (%).

Peak Input (KB/sec)

A measure of ICA client traffic from an ICA Client to a Presentation Server.

Peak Input Bandwidth Used (Kbps)

The greatest single input bandwidth used data sample, expressed as kilobits per second. Input bandwidth used is the actual bandwidth consumed on the network (ICA Client to Presentation Server). This metric is calculated by the session experience monitoring service.

Peak Latency (ms)

The highest measured ICA session latency in milliseconds for a time period. ICA session latency is based on the last recorded latency measured for the session (Latency - Last Recorded). The samples recorded by the agent are consolidated to one hour intervals in the data uploaded to the server.

Peak Login Time (sec)

The highest recorded login time for a selected time period. Login time is the time between the start of a session and the end of the last process created as part of the login operation for that session. The login time metric is computed on the Presentation Server machine where the agent is running.

Peak Output (KB/sec)

A measure of ICA client traffic from the Presentation Server to an ICA Client.

Peak Output Bandwidth Used (Kbps)

The greatest single output bandwidth used data sample, expressed as kilobits per second. Output bandwidth used is the actual bandwidth consumed on the network (Presentation Server to ICA Client).

Percent Free

The percentage of total space on a disk which is free.

Percent Memory

The percentage of available memory used on a device over a specified time period.

Percent of All Connections

The percentage of all connections made to a Presentation Server that were made by a specific client type over the specified time period.

Physical Memory (MB)

The amount of physical memory (in megabytes) installed on a device.

PLSD

Profile Load Server Duration. The time (ms) spent on the server loading the users' profile. (EUEM)

PNCOSD

Program Neighborhood Credentials Obtention Server Duration. The time (ms) taken for the server to cause the Program Neighborhood instance running on the client (PN Classic) to obtain the user credentials. This credentials dialog is displayed and managed by the client side, but the duration is measured on the server. (EUEM)

Port

The port, identified by port number, for a Web site.

PPS

See Pages per second.

Printer Input (bps)

The bandwidth, measured in bps, used when printing to a client printer through a client that has print spooler support enabled.

Printer Output (bps)

The bandwidth, measured in bps, used when printing to a client printer through a client that has print spooler support enabled.

Private Kbytes (or Private KB)

The current size, in bytes, of memory that this process has allocated (Process
Private Bytes). Private bytes cannot be shared with other processes.

Privileged Time %

Privileged Time % is the percentage of elapsed time that the process threads spent executing code in privileged mode. Windows system services often runs in privileged mode to gain access to system-private data. Such data is protected from access by threads executing in user mode. Calls to the system can be explicit or implicit, such as page faults or interrupts. Windows uses process boundaries for subsystem protection in addition user and privileged modes.

Proc Count

In CPU reports, the number of processors on a device.

Process

The name of the specific process being reported on.

Process Count

The number of processes run on the device over the specified time period.

Process Ended

The date and time that a process within a session ended.

Process Faults

The number of process faults encountered during the specified time period. See Faults.

Processor Speed

In CPU reports, a range of processor speeds (expressed in gigahertz), such as 1 GHz to 2Ghz. In detail areas, processor speed is shown in megahertz (MHz) for individual devices.

Process Started

The date and time that a process within a session started.

Property

In asset reports, the WMI property associated with an asset change. See Asset for more information.

Published Application

The name under which an application is published on a Presentation Server. If this field is blank, this indicates that the application is not a published application.

Back to top

R

RDP

The number of sessions using RDP (Remote Desktop Protocol). RDP is an input/output presentation protocol from Microsoft that controls keyboard, mouse, and screen formatting between clients and servers in a thin client environment.

Reboots

The number of system reboots detected during the specified time period, including both expected and unexpected reboots. An expected or user-initiated reboot is one occurring under software control as a result of a user action. For example, a user initiated reboot occurs when applying a service pack requiring a reboot, or shutting down the system from the shutdown menu or the task manager. An unknown or unexpected reboot is defined as one that did not occur under software control. For example, pressing the reset button, unplugging the computer, or turning off power are all examples of unexpected reboots. Unexpected reboots may indicate an end user response to system problems.

RECD

Reconnect Enumeration Client Duration. The time (ms) it takes a client to get a list of reconnections. (EUEM)

Received (KB) - volume

Network volume is the total number of kilobytes received from a server as measured passively from the clients.

Request

The part of a web transaction that specifies the type of content exchanged, such as text/html.

REWD

Reconnect Enumeration Web Server Duration. The time (ms) it takes the Web Interface to get the list of reconnections from the XML service. (EUEM)

Running Time

Running time is the actual amount of time that a program is running in memory, regardless of whether the user is using the application. Citrix EdgeSight Agents track application usage to calculate how long an application is actively used and how long it is run, and to collect usage counts for license tracking.

Back to top

S

SCSD

Session Creation Server Duration. The time (ms) spent on the server creating the session. The duration starts when the ICA client connection has been opened and ends when authentication begins. This should not be confused with the overall Session Startup Server duration. (EUEM)

Sent (KB) - volume

Network volume is the total number of kilobytes sent from a server as measured passively from the clients.

Server Delay (ms)

Server delay (ServerPercent) is derived from Network and Client Delay. The server delay value represents the delay beyond the first level server, which could contain multiple tiers of delay.

Server Time

The time that an event occurred or was received by the server. The time is displayed relative to the time zone of the server. Note that clients (devices running the EdgeSight Agent) and the associated server may be in different time zones.

Session Duration

The total elapsed time that a session was active.

Session Ended

The date and time that a Presentation Server session was ended.

Session Started

The date and time that a Presentation Server session was started.

Sessions

The number of Presentation Server sessions started over a specified time period.

Sessions Created

The total number of Presentation Server sessions created during a specified time period.

Site

A Web site, identified by an IP address or host name.

Source

The system entity causing the alert condition, such as an application, process, web site, or system service.

SpeedScreen Input (bps)

The bandwidth, measured in bps, used from client to server for data channel traffic.

SpeedScreen Output (bps)

The bandwidth, measured in bps, used from server to client for data channel traffic.

SSSD

Session Startup Server Duration. This is the high level server connection startup metric. This includes the time (ms) spent on the Presentation Server performing the entire start-up operation. In the event of an application starting in a shared session, this metric is expected to be much smaller, as starting a completely new session involves potentially high cost tasks such as profile loading and login script execution. (EUEM)

Started or Start Time

The time that a user's Presentation Server session was started.

Status

In the Application Response Time for a Test report, the pass/fail status of an EdgeSight Active Application Monitoring test.

System Calls/sec

System Calls/sec is the combined rate of calls to operating system service routines by all processes running on the computer. These routines perform all of the basic scheduling and synchronization of activities on the computer, and provide access to non-graphic devices, memory management, and name space management. This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval.

Back to top

T

Test

The name of an EdgeSight Active Application Monitoring test.

Test Start Time

The time that an EdgeSight Active Application Monitoring test was started. A test can include one or more scripts.

Tests Failed

The number of tests which failed during the time period selected. Tests are created using EdgeSight Active Application Monitoring and can include one or more scripts.

Tests Passed

The number of tests which passed during the time period selected. Tests are created using EdgeSight Active Application Monitoring and can include one or more scripts.

Thread Count

The number of threads currently active in a process (Process
Thread Count).

Total CPU (%)

The percentage of total CPU time used by a session or process over the specified time period. See CPU (%).

Total Delay (ms)

The total network delay over a specified time period. See Network Delay (ms).

Total KB - volume

See Volume (KB)

Total Sessions

The total number of sessions (active and inactive) during the specified time period.

Total Volume (KB)

See Volume (KB).

Transaction

A network transaction, defined by a site, transaction, request, and type. Citrix EdgeSight Agents passively measure the delay and round trip time at the HTTP component level, such as javascript, text, and html get requests, for a host/page request from a device.

Type

In asset reports, the type of asset change that occurred, such as added, changed, or removed.

In web transaction reports, the type of action being performed, such as GET or POST.

Back to top

U

Unique Users

The number of unique users (defined by domain and user name) of a process.

User

An individual logged on to a monitored device and identified by a domain and username.

User Time %

User Time% is the percentage of elapsed time the processor spends in the user mode. User mode is a restricted processing mode designed for applications, environment subsystems, and integral subsystems (privileged mode is designed for operating system components and allows direct access to hardware and all memory). The operating system switches application threads to privileged mode to access operating system services. This counter displays the average busy time as a percentage of the sample time.

Back to top

V

Version

The version number of a process or application.

Video Frame Input (bps)

The bandwidth from client to server traffic on a virtual channel. Measured in bps.

Video Frame Output (bps)

The bandwidth from server to client traffic on a virtual channel. Measured in bps.

Virtual Kbytes (or Virtual KB)

The current size, in kilobytes, of the virtual address space used by the selected process (Process
Virtual Bytes). This metric is useful for diagnosing memory leaks, which can cause either a steady increase or a sharp spike in virtual byte usage.

Volume (KB)

Network volume is the total number of kilobytes sent and received from a server as measured passively from the clients.

W

Web Errors

Web errors include both transaction errors and Winsock errors.

Working Set (KB)

The shared and private kilobytes allocated to a process (Process
Working Set). The working set represents the actual amount of physical memory used by a process.

Back to top