VDAs have event logs full of 1004, 1007 & 1017 events for TDICA:

The description for Event ID 1007 from source TdIca cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. 

If the event originated on another computer, the display information had to be saved with the event. 

The following information was included with the event: 

\Device\TdIca 
ICA 
172.28.157.20:9529 
2598 
SSL

Where 172.28.157.20 is the Management IP address of NetScaler.

Remove the servers configured on NetScaler, since that is not required to be monitored.

Problem Cause

NetScaler was configured to monitor VDAs and was constantly generating events on VDA, even when there were no sessions on VDA.