topic Re: Splunk User behavior app build in Splunk User Behavior Analytics

Splunk User behavior app build

Ephrem32 — Tue, 03 Nov 2020 17:08:21 GMT

Hi,

I would like to build my own Splunk User behavior app. Can you guide me through the steps on building it by providing a references and other sites that can help me build it.

Thank you,

Re: Splunk User behavior app build

richgalloway — Tue, 03 Nov 2020 18:01:01 GMT

UBA is a premium app for which Splunk charges many thousands of dollars to support the team of developers that work on it. As such, you're not likely to find sites that will help you replicate Splunk intellectual property. Good luck, however, because if you are successful and don't infringe on a Splunk patent you could make a fair amount of money on it.

Re: Splunk User behavior app build

Ephrem32 — Tue, 03 Nov 2020 22:30:37 GMT

Thank you for your response, I'm trying to do build an app similar to UBA and its campablities. I need guides on how to approach building an app and creating it to scan user behavior analytics on the security sector. An reference or guides would help.

Thank you,

@richgalloway

Re: Splunk User behavior app build

Ephrem32 — Wed, 04 Nov 2020 12:46:04 GMT

Please anyone can you help guide me to create a similar app like Splunk User Behavior Analytics. An reference or guides would help.

Re: Splunk User behavior app build

inventsekar — Wed, 04 Nov 2020 14:32:23 GMT

Hi @Ephrem32 .. as other reply said, Splunk UBA is a Premium Solution. we got no other free apps/solution which can do the same job of UBA.

the Splunk Training portal got around 5 free courses, in which one course is about UBA. that training will give you more ideas about UBA and its features.

https://education.splunk.com/catalog

For your first question, by the "build", i assume you are referring to "open source" tools build/compile/install from the source code. As Splunk itself is a paid tool, we can not get its source code and build it. we can get only executable files, which will only "install"(no build/complie, etc)