Application Usage

Dashboard to analyze application usage, the UXM desktop agent monitors application in foreground every 3 seconds, summaries it and sends it to UXM at the configured interval in the Process Monitor (Default each 5 minute)

This dashboard can be used to:

See most used application in organization.
See hourly/daily peak concurrent usage for license management.
Drilldown into "Analyze application usage" to see unique endpoint devices using application for license management based on seat/hostname based licenses.

Requirements

UXM Desktop monitors (under Administration -> UXM Desktop Agent -> Desktop monitors)
- A Process Monitor needs to be configured with "Foreground app usage" checked.
  
  Please be aware that increasing the interval in which the summarized data is send could lead to data loss due to samples not being send if users shutdown the laptop or logs out of a virtual desktop session, it's recommended to keep under 15 minute interval.
UXM Desktop agents needs to be installed on the following endpoint devices:
- Endpoint devices: The UXM Desktop agent needs to be installed on the local endpoint devices.
- Citrix: The UXM Desktop agent needs to be install on the Citrix Delivery Controller (DC) and Virtual Delivery Agent (VDA) servers.
- Servers/Azure Virtual Desktops (AVD)/RDS: The UXM Desktop agent needs to be install on the Windows servers.
Daily executed data input script "daily_maintenance.py" updates ux_applications_lookup with discovered applications and maps the process executables to the application name, the application usage will be calculated for the application after it's discovered.
Scheduled report `summary_metrics_application_foreground_time_hourly_rollup` needs to be enabled and runs hourly and summarized the data received by the process monitor.

The index can be backfilled by running the following command on the Search Head server:
```
cd /opt/splunk/bin
./splunk cmd python fill_summary_index.py -name "summary_metrics_application_foreground_time_hourly_rollup" -et -1mon@mon -lt -2h@h
```

Data Collected

Desktop apps

The UXM Desktop Agent monitors the application in foreground every 3 seconds, summaries the data and sends it to UXM at the configured interval in the Process Monitor. (Default each 5 minute)

The process .exe information is extracted containing Publisher, Name, Version (File and Product), Path and Company.

The usage is linked to installed applications when possible.

Detected applications can be renamed, so the processname.exe matches what the customer calls the application internally.

Web apps

UXM Web Agent uses the response time as Application Usage.

Browser Extension

UXM Browser Extension uses the response time as Application Usage, in next release it can be setup to summarize time tab is in foreground on configured urls.

Panels

Application Usage Table

Shows list of most used application, an hourly summery over unique users, locations and endpoints is created to provide an quick overview over hourly usage across the enterprise.

Tag filters can be applied to only see applications used for selected application groups like Office, Citrix, etc and is defined in the Application admin page.

Click on Application to see usage for application over time.

Application Usage Breakdown Chart

Shows top 10 most used applications over time.

Application Usage Chart

Displayed when selecting application from table, shows hourly application usage over time selected time range.

Click "Analyse application usage" to investigate which endpoints, processes and locations that are using the application and to see unique endpoints that have used application.