splunk didn't receive detail of "User logon duration" from domain user account

Environment: VMware Horizon 6, Windows 7, floating pool, link clone.

Same VM, but different result from domain user and local user.

I can't get the information of Group Policy, Processing time, logon process performance and other dashboard in User Logon Duration page if I login as a domain user.


But I do receive those information when I login as a local user.

Both of domain account and local account are administrator in this VM.


1 comment

  • 0
    Helge Klein

    Just to be on the safe side: did you wait 5-10 minutes after the logon before logging the user off?

    Please check uberAgent's log file. It should have detailed information on what is going on.

Please sign in to leave a comment.