In the VMware horizon events DB, event type of "AGENT_ENDED" you get a name of "TotalLoginLength" the name kind of implies number of seconds logged in but the int or stvalue are negative values.
Does anybody have any idea of what is going on?
Here's the SQL:
SELECT viewevent.*, viewevent_data.*
FROM viewevent INNER JOIN
viewevent_data ON viewevent.EventID = viewevent_data.EventID WHERE name = 'TotalLoginLength' ORDER BY Time ASC;
Its the time of seconds since the user disconnected from the desktop/application. Its always negative for agent_ended
Are you sure? Because the Time column disagrees.
I see a AGENT_RECONNECTED for example then 2 minutes later I see AGENT_ENDED but the TotalLoginLength is -13692. The user first logged in and requested a desktop 20ish minutes ago.
March 23rd 2018, 18:24:50.210 BROKER_USERLOGGEDIN
March 23rd 2018, 18:25:20.143 BROKER_DESKTOP_REQUEST
March 23rd 2018, 18:25:20.157 BROKER_MACHINE_ALLOCATED
March 23rd 2018, 18:25:43.803 AGENT_CONNECTED
March 23rd 2018, 18:30:37.447 AGENT_DISCONNECTED CurrentSessionLength 293
March 23rd 2018, 18:33:29.733 BROKER_DESKTOP_REQUEST
March 23rd 2018, 18:33:29.750 BROKER_MACHINE_ALLOCATED
March 23rd 2018, 18:33:33.553 AGENT_RECONNECTED
March 23rd 2018, 18:36:41.403 AGENT_DISCONNECTED CurrentSessionLength 187
March 23rd 2018, 18:41:26.623 BROKER_USERLOGGEDOUT
March 23rd 2018, 18:43:04.113 BROKER_USERLOGGEDIN
March 23rd 2018, 18:43:07.130 BROKER_DESKTOP_REQUEST
March 23rd 2018, 18:43:07.140 BROKER_MACHINE_ALLOCATED
March 23rd 2018, 18:43:22.270 AGENT_RECONNECTED
March 23rd 2018, 18:45:18.753 AGENT_ENDED CurrentSessionLength -400
March 23rd 2018, 18:45:18.753 AGENT_ENDED TotalLoginLength -13,692
Intuitively I would have expected TotalLoginLength to be about 19 minutes and 25 seconds, or have I misunderstood something?
I compared it to an event in my database and it aligned to the time the user disconnected and the time it ended. I was looking at a desktop. It may be different for RDSH.
What is the agent_Startup time for the device the user logged in?
I'm also dealing with desktop.
Agent startup is:
March 23rd 2018, 14:38:21.860 AGENT_STARTUP
That kind of fits the 13692 seconds (4 hours) narrative (March 23rd 2018, 18:45:18.753 AGENT_ENDED).