<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic How to change User Identification in Splunk UBA HR data in Splunk User Behavior Analytics</title>
    <link>https://community.splunk.com/t5/Splunk-User-Behavior-Analytics/How-to-change-User-Identification-in-Splunk-UBA-HR-data/m-p/703988#M73</link>
    <description>&lt;PRE&gt;&lt;SPAN class=""&gt;hello everyone
I ran into a problem with &lt;SPAN&gt;Splunk UBA&lt;/SPAN&gt; that I need help with. Thank you for guiding me.&lt;BR /&gt;&lt;SPAN&gt;I have more than one domain in Splunk UBA and it mistakenly recognizes some users as the same user due to name similarity. &lt;BR /&gt;While these users are not the same person and only have name similarities in the login ids field.&lt;BR /&gt;&lt;BR /&gt;How can I solve this problem and have users with the same login ids but not have false positive anomalies?&lt;BR /&gt;&lt;BR /&gt;Thank you for your guidance.&lt;BR /&gt;&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;/PRE&gt;</description>
    <pubDate>Sat, 09 Nov 2024 06:05:40 GMT</pubDate>
    <dc:creator>mld_msr</dc:creator>
    <dc:date>2024-11-09T06:05:40Z</dc:date>
    <item>
      <title>How to change User Identification in Splunk UBA HR data</title>
      <link>https://community.splunk.com/t5/Splunk-User-Behavior-Analytics/How-to-change-User-Identification-in-Splunk-UBA-HR-data/m-p/703988#M73</link>
      <description>&lt;PRE&gt;&lt;SPAN class=""&gt;hello everyone
I ran into a problem with &lt;SPAN&gt;Splunk UBA&lt;/SPAN&gt; that I need help with. Thank you for guiding me.&lt;BR /&gt;&lt;SPAN&gt;I have more than one domain in Splunk UBA and it mistakenly recognizes some users as the same user due to name similarity. &lt;BR /&gt;While these users are not the same person and only have name similarities in the login ids field.&lt;BR /&gt;&lt;BR /&gt;How can I solve this problem and have users with the same login ids but not have false positive anomalies?&lt;BR /&gt;&lt;BR /&gt;Thank you for your guidance.&lt;BR /&gt;&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;/PRE&gt;</description>
      <pubDate>Sat, 09 Nov 2024 06:05:40 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-User-Behavior-Analytics/How-to-change-User-Identification-in-Splunk-UBA-HR-data/m-p/703988#M73</guid>
      <dc:creator>mld_msr</dc:creator>
      <dc:date>2024-11-09T06:05:40Z</dc:date>
    </item>
  </channel>
</rss>

