XM User Logins Test

By tracking user sessions to the Endpoint Management server, the XM User Logins test helps administrators gauge the workload of the Endpoint Management appliance and quickly capture failed login attempts.

For this test to run and report metrics, the Endpoint Management server should be configured to create a Syslog file in a remote Syslog server, where the details and status of all user interactions with the Endpoint Management server will be logged. To know how to configure a remote Syslog server for the use of the Endpoint Management server, refer to Configuring Syslog server .

Target of the test : A Citrix Endpoint Management

Agent deploying the test : A remote agent deployed on the Syslog server

Outputs of the test : One set of results for the target Endpoint Management server being monitored.

Configurable parameters for the test
Parameter Description

Test Period

How often should the test be executed.


The host for which the test is to be configured.


The port at which the specified host listens. By default, this is 4443.

Log File Path

This test reports metrics by parsing a Syslog file. Specify the full path to the Syslog file here. To know how to configure the Syslog server where the Endpoint Management will be creating this file, refer to Configuring Syslog server .

Search String

By default, the Syslog file may contain information relating to a number of servers that are inter linked with the target Endpoint Management. In order to obtain the metrics of the target Endpoint Management alone, specify the hostname or the IP address of the target Endpoint Management server for which the logs are to be read from the syslog file, in the Search String text box. Using this search string the information in the Syslog file may be parsed and metrics may be collected.

Search String Index

Here, specify the cursor position after which the eG agent should search for the specified Search String (or the position up to which the eG agent should ignore while searching for the specified Search String) in the syslog file. For example, if the specified search string appears in the syslog file at the 17th position, then you may need to specify the Search String Index as 16.

DD Frequency

Refers to the frequency with which detailed diagnosis measures are to be generated for this test. The default is 1:1. This indicates that, by default, detailed measures will be generated every time this test runs, and also every time the test detects a problem. You can modify this frequency, if you so desire. Also, if you intend to disable the detailed diagnosis capability for this test, you can do so by specifying none against DD frequency.

Detailed Diagnosis

To make diagnosis more efficient and accurate, the eG Enterprise embeds an optional detailed diagnostic capability. With this capability, the eG agents can be configured to run detailed, more elaborate tests as and when specific problems are detected. To enable the detailed diagnosis capability of this test for a particular server, choose the On option. To disable the capability, click on the Off option.

The option to selectively enable/disable the detailed diagnosis capability will be available only if the following conditions are fulfilled:

  • The eG manager license should allow the detailed diagnosis capability
  • Both the normal and abnormal frequencies configured for the detailed diagnosis measures should not be 0.
Measurements made by the test
Measurement Description Measurement Unit Interpretation

Connected sessions

Indicates the total number of users currently connected to the Endpoint Management server.


This is a good indicator of the current session load on the Endpoint Management server.

New logins

Indicates the number of users who logged in during the last measurement period.



Percentage of new logins

Indicates the percentage of users who logged in recently.



Session logouts

Indicates the number of sessions that logged out during the last measurement period.


A sudden increase in the value of this measure could warrant closer scrutiny.

Failed logins

Indicates the number of logins that failed.


A low value is desired for this measure.