Security App with Multi-tentant

[enerv]

Hi everyone,

Someone have experience using the Security App with multi-tentant?\
We are a MSSP and we don't want to see all the logs together in the Security App.

Thanks in advance.

[pahartnett]

What about separating each customer into a separate index? Would that enable ES to search while keeping data segregated?

[sdaniels]

The Splunk App for Enterprise Security is not supported at this time in a multi-tenant environment. We have many service providers using Splunk Enterprise for multiple customers to handle Security requirements within the same Splunk instance, however if you need use the App for ES, your best option is to provide a separate instance for each customer.

[ashishmaind2499]

Is your answer is still valid now. Is it supporting now? what about Splunk UBA? Is UBA multi tenant?