Splunk UBA Installation?

[kiran331]

Hi Whats the difference in Installing a Splunk UBA on single server and Multiple servers?Whats the best practice?

[David · Accepted solution]

Hi Kiran,

At a basic level, it's about the sizing that you need. You can check out sizing on our public docs: http://docs.splunk.com/Documentation/UBA/3.2.0/Install/DeploymentArchitecture.

As far as the actual install process, it's pretty similar. You have to set up and IP multiple systems, obviously, but during the actual install on the primary node you'll give it the IPs or DNS Names of the other nodes, and it will run through everything.

All that's also in our docs, but we'd be happy to talk in more depth about the setup and the specifics of your environment. Just respond back here and let me know, and I can reach out offline (or of course ask your account team, and they can connect us).

-David

[kiran331]

Hi David, UBA is already deployed in our environment on a single Ubuntu VM. But were having issues in running UBA, so I just want to install a new setup.