topic Re: How to identify Management Node (or) Master node in a existing distributed UBA Deployment of 10 nodes in Splunk User Behavior Analytics https://community.splunk.com/t5/Splunk-User-Behavior-Analytics/How-to-identify-Management-Node-or-Master-node-in-a-existing/m-p/518868#M6 <P>In a distributed setup, generally node 1 / ubanode1 is the master node.&nbsp; ( You can also see them in /etc/hosts file).&nbsp;&nbsp;</P><P>In the caspida-deployment.conf file referred in the above link, look for 'container.master.host' and that should indicate your master node and match with node1 in /etc/hosts. Additionally, if you go to UI, System-&gt;Cluster-&gt;Cluster services, search for UI and that will give the node as well [ assuming UI is setup on master, which is normally the case]</P> Thu, 10 Sep 2020 12:17:36 GMT lakshman239 2020-09-10T12:17:36Z How to identify Management Node (or) Master node in a existing distributed UBA Deployment of 10 nodes https://community.splunk.com/t5/Splunk-User-Behavior-Analytics/How-to-identify-Management-Node-or-Master-node-in-a-existing/m-p/515947#M5 <P>Hi Team,</P><P>How do I identify the management node or master node in an existing distributed UBA Deployment (7 node or 10 node or 20 node)</P><P><A href="https://docs.splunk.com/Documentation/UBA/5.0.3/Install/TSUBAServicesNodes" target="_blank">https://docs.splunk.com/Documentation/UBA/5.0.3/Install/TSUBAServicesNodes</A>&nbsp;doesn't have details about the same.</P> Tue, 25 Aug 2020 07:07:41 GMT https://community.splunk.com/t5/Splunk-User-Behavior-Analytics/How-to-identify-Management-Node-or-Master-node-in-a-existing/m-p/515947#M5 VasukiPramod 2020-08-25T07:07:41Z Re: How to identify Management Node (or) Master node in a existing distributed UBA Deployment of 10 nodes https://community.splunk.com/t5/Splunk-User-Behavior-Analytics/How-to-identify-Management-Node-or-Master-node-in-a-existing/m-p/518868#M6 <P>In a distributed setup, generally node 1 / ubanode1 is the master node.&nbsp; ( You can also see them in /etc/hosts file).&nbsp;&nbsp;</P><P>In the caspida-deployment.conf file referred in the above link, look for 'container.master.host' and that should indicate your master node and match with node1 in /etc/hosts. Additionally, if you go to UI, System-&gt;Cluster-&gt;Cluster services, search for UI and that will give the node as well [ assuming UI is setup on master, which is normally the case]</P> Thu, 10 Sep 2020 12:17:36 GMT https://community.splunk.com/t5/Splunk-User-Behavior-Analytics/How-to-identify-Management-Node-or-Master-node-in-a-existing/m-p/518868#M6 lakshman239 2020-09-10T12:17:36Z